CVE-2017-15352: Incorrect Permission Assignment for Critical Resource

Huawei OceanStor 2800 V3, V300R003C00, V300R003C20, OceanStor 5300 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5500 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5600 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5800 V3, V300R003C00, V300R003C10, V300R003C20 have an improp...

CVE-2016-8754

Huawei OceanStor 5600 V3 V300R003C00 has a hardcoded SSH key vulnerability; the hardcoded keys are used to encrypt communication data and authenticate different nodes of the devices. An attacker may obtain the hardcoded keys and log in to such a device through SSH...

Hardcoded credentials

Huawei OceanStor 5600 V3 V300R003C00 has a hardcoded SSH key vulnerability; the hardcoded keys are used to encrypt communication data and authenticate different nodes of the devices. An attacker may obtain the hardcoded keys and log in to such a device through SSH...

CVE-2016-8801

Huawei OceanStor 5600 V3 (V300R003C00C10 and earlier) is affected by CVE-2016-8801, a command-injection vulnerability arising from input-validation weaknesses in specific command parameter handling. An attacker with administrator privileges can inject and execute commands with root privileges, le...

PT-2017-9784

Name of the Vulnerable Software and Affected Versions Huawei OceanStor 5600 V3 version V300R003C00 Description The issue concerns a hardcoded SSH key used for encrypting communication data and authenticating different nodes of the devices. An attacker may obtain the hardcoded keys and log in to t...

CVE-2016-8801: Improper Neutralization of Special Elements used in a Command

Huawei OceanStor 5600 V3 with V300R003C00C10 and earlier versions allows attackers with administrator privilege to inject a command into a specific command's parameters, and run this injected command with root privilege...

CVE-2016-8754: Use of Hard-coded Credentials

Huawei OceanStor 5600 V3 V300R003C00 has a hardcoded SSH key vulnerability; the hardcoded keys are used to encrypt communication data and authenticate different nodes of the devices. An attacker may obtain the hardcoded keys and log in to such a device through SSH...

PT-2017-9817

Name of the Vulnerable Software and Affected Versions Huawei OceanStor 5600 V3 versions V300R003C00C10 and earlier Description The issue allows attackers with administrator privilege to inject a command into specific command parameters and run the injected command with root privilege...