Overview
- Description
- OceanStor 5800 V3 with software V300R002C00 and V300R002C10, OceanStor 6900 V3 V300R001C00 has an information leakage vulnerability. Products use TLS1.0 to encrypt. Attackers can exploit TLS1.0's vulnerabilities to decrypt data to obtain sensitive information.
- Source
- psirt@huawei.com
- NVD status
- Analyzed
Risk scores
CVSS 3.0
- Type
- Primary
- Base score
- 5.9
- Impact score
- 3.6
- Exploitability score
- 2.2
- Vector string
- CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- Severity
- MEDIUM
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- CWE-327
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:oceanstor_5800_v3:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "524A38D1-1A6A-4969-8DAB-D7A3809F0E62"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:oceanstor_5800_v3_firmware:v300r002c00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F238EE9F-FDA9-4A95-84DA-CE2A5E8D3F1B"
},
{
"criteria": "cpe:2.3:o:huawei:oceanstor_5800_v3_firmware:v300r002c10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7CC607F8-2E3C-4B6C-AA44-A3FD66644D93"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:oceanstor_6900_v3:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DFF2739C-77B6-48A9-AB95-4B4F9BF87F72"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:oceanstor_6900_v3_firmware:v300r001c00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3B3DCBCB-33A8-46E8-944C-3CFAE33BF390"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]