Design/Logic Flaw

2017-06-0816:29:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

51.8%

JSON

The XML interface in Huawei OceanStor UDS devices with software before V100R002C01SPC102 allows remote authenticated users to obtain sensitive information via a crafted XML document.

CPENameOperatorVersion
oceanstor_uds_firmwareeq<= v100r2c1spc101

CPE	Name	Operator	Version
	oceanstor_uds_firmware	eq	<= v100r2c1spc101

References

www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-417837.htm