EUVD-2015-2358

Malware in sbrugna...

CVE-2015-2254: Exposure of Sensitive Information to an Unauthorized Actor

Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to capture and change patch loading information resulting in the deletion of directory files and compromise of system functions when loading a patch...

Huawei OceanStor UDS DeviceManager Information Disclosure Vulnerability

Huawei OceanStor UDS is a high-density storage node and distributed storage system based on ARM architecture from Huawei, China.DeviceManager is one of the device management tools. A security vulnerability exists in DeviceManager in Huawei OceanStor UDS V100R002C01SPC101 and earlier versions. A...

Huawei OceanStor UDS Code Injection Vulnerability

Huawei OceanStor UDS is a high-density storage node and distributed storage system based on ARM architecture from Huawei, China. A security vulnerability exists in Huawei OceanStor UDS V100R002C01SPC101 and earlier versions. A remote attacker can exploit the vulnerability by injecting SHELL scrip...

Design/Logic Flaw

The XML interface in Huawei OceanStor UDS devices with software before V100R002C01SPC102 allows remote authenticated users to obtain sensitive information via a crafted XML document...

Design/Logic Flaw

The DeviceManager in Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to obtain sensitive information via a crafted UDS patch with JavaScript...

CVE-2015-2252

Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to execute arbitrary code with root privileges via a crafted UDS patch with shell scripts...

CVE-2015-2252

Huawei OceanStor UDS devices prior to V100R002C01SPC102 are affected by CVE-2015-2252 where an attacker can inject shell scripts into UDS patches and execute them with root privileges via a crafted patch. CNVD-2017-22533 confirms a remote code injection vector in UDS V100R002C01SPC101 and earlier...

CVE-2015-2253: Exposure of Sensitive Information to an Unauthorized Actor

The XML interface in Huawei OceanStor UDS devices with software before V100R002C01SPC102 allows remote authenticated users to obtain sensitive information via a crafted XML document...

CVE-2015-2251: Exposure of Sensitive Information to an Unauthorized Actor

The DeviceManager in Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to obtain sensitive information via a crafted UDS patch with JavaScript...

CVE-2015-2252: Improper Control of Generation of Code

Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to execute arbitrary code with root privileges via a crafted UDS patch with shell scripts...