Code injection

2017-06-0816:29:00

PRIOn knowledge base

www.prio-n.com

8.4 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.4%

JSON

Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to execute arbitrary code with root privileges via a crafted UDS patch with shell scripts.

CPENameOperatorVersion
oceanstor_uds_firmwareeq<= v100r2c1spc101

CPE	Name	Operator	Version
	oceanstor_uds_firmware	eq	<= v100r2c1spc101

References

www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-417837.htm