CVEvulnerability

CVE-2017-8157

5.9 MEDIUM Published 2017-11-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-11-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.9 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-327

Description

OceanStor 5800 V3 with software V300R002C00 and V300R002C10, OceanStor 6900 V3 V300R001C00 has an information leakage vulnerability. Products use TLS1.0 to encrypt. Attackers can exploit TLS1.0's vulnerabilities to decrypt data to obtain sensitive information.

Affected configurations

• huawei oceanstor 5800 v3 firmware v300r002c00 • huawei oceanstor 5800 v3 firmware v300r002c10 • huawei oceanstor 6900 v3 firmware v300r001c00

Related

Weakness · CWE (1)

  • CWE-327 Use of a Broken or Risky Cryptographic Algorithm weakness

References