EUVD-2015-2358

Malware in sbrugna...

PT-2019-7175

Name of the Vulnerable Software and Affected Versions Huawei OceanStor UDS devices versions prior to V100R002C01SPC102 Description The issue allows remote attackers to capture and change patch loading information. This can result in the deletion of directory files and compromise of system functio...

CVE-2015-2254: Exposure of Sensitive Information to an Unauthorized Actor

Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to capture and change patch loading information resulting in the deletion of directory files and compromise of system functions when loading a patch...

Huawei OceanStor UDS DeviceManager Information Disclosure Vulnerability

Huawei OceanStor UDS is a high-density storage node and distributed storage system based on ARM architecture from Huawei, China.DeviceManager is one of the device management tools. A security vulnerability exists in DeviceManager in Huawei OceanStor UDS V100R002C01SPC101 and earlier versions. A...

Huawei OceanStor UDS Code Injection Vulnerability

Huawei OceanStor UDS is a high-density storage node and distributed storage system based on ARM architecture from Huawei, China. A security vulnerability exists in Huawei OceanStor UDS V100R002C01SPC101 and earlier versions. A remote attacker can exploit the vulnerability by injecting SHELL scrip...

Design/Logic Flaw

The DeviceManager in Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to obtain sensitive information via a crafted UDS patch with JavaScript...

CVE-2015-2252

Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to execute arbitrary code with root privileges via a crafted UDS patch with shell scripts...

Design/Logic Flaw

The XML interface in Huawei OceanStor UDS devices with software before V100R002C01SPC102 allows remote authenticated users to obtain sensitive information via a crafted XML document...

CVE-2015-2252

Huawei OceanStor UDS devices prior to V100R002C01SPC102 are affected by CVE-2015-2252 where an attacker can inject shell scripts into UDS patches and execute them with root privileges via a crafted patch. CNVD-2017-22533 confirms a remote code injection vector in UDS V100R002C01SPC101 and earlier...

CVE-2015-2253: Exposure of Sensitive Information to an Unauthorized Actor

The XML interface in Huawei OceanStor UDS devices with software before V100R002C01SPC102 allows remote authenticated users to obtain sensitive information via a crafted XML document...

CVE-2015-2252: Improper Control of Generation of Code

Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to execute arbitrary code with root privileges via a crafted UDS patch with shell scripts...

CVE-2015-2251: Exposure of Sensitive Information to an Unauthorized Actor

The DeviceManager in Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to obtain sensitive information via a crafted UDS patch with JavaScript...

PT-2017-2865

Name of the Vulnerable Software and Affected Versions Huawei OceanStor UDS versions prior to V100R002C01SPC102 Description The issue is related to incorrect code generation management in the system. It may allow a remote attacker to execute arbitrary code with root privileges by using a specially...

PT-2017-6562

Name of the Vulnerable Software and Affected Versions Huawei OceanStor UDS devices versions prior to V100R002C01SPC102 Description The issue allows remote authenticated users to obtain sensitive information by submitting a crafted XML document to the XML interface. Recommendations For versions...

PT-2017-6561

Name of the Vulnerable Software and Affected Versions Huawei OceanStor UDS devices versions prior to V100R002C01SPC102 Description The issue allows remote attackers to obtain sensitive information via a crafted UDS patch that utilizes JavaScript. Recommendations For versions prior to...