EUVD-2015-2358

Malware in sbrugna...

Huawei OceanStor UDS DeviceManager Information Disclosure Vulnerability

Huawei OceanStor UDS is a high-density storage node and distributed storage system based on ARM architecture from Huawei, China.DeviceManager is one of the device management tools. A security vulnerability exists in DeviceManager in Huawei OceanStor UDS V100R002C01SPC101 and earlier versions. A...

Huawei OceanStor UDS Code Injection Vulnerability

Huawei OceanStor UDS is a high-density storage node and distributed storage system based on ARM architecture from Huawei, China. A security vulnerability exists in Huawei OceanStor UDS V100R002C01SPC101 and earlier versions. A remote attacker can exploit the vulnerability by injecting SHELL scrip...

Design/Logic Flaw

The DeviceManager in Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to obtain sensitive information via a crafted UDS patch with JavaScript...

CVE-2015-2252

Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to execute arbitrary code with root privileges via a crafted UDS patch with shell scripts...

Design/Logic Flaw

The XML interface in Huawei OceanStor UDS devices with software before V100R002C01SPC102 allows remote authenticated users to obtain sensitive information via a crafted XML document...

CVE-2015-2252

Huawei OceanStor UDS devices prior to V100R002C01SPC102 are affected by CVE-2015-2252 where an attacker can inject shell scripts into UDS patches and execute them with root privileges via a crafted patch. CNVD-2017-22533 confirms a remote code injection vector in UDS V100R002C01SPC101 and earlier...