CVE-2017-8157

Description

OceanStor 5800 V3 with software V300R002C00 and V300R002C10, OceanStor 6900 V3 V300R001C00 has an information leakage vulnerability. Products use TLS1.0 to encrypt. Attackers can exploit TLS1.0s vulnerabilities to decrypt data to obtain sensitive information.

Risk Information

Base Score

5.9

MODERATE

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

0.091

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2017-8157 are affected in oceanstor_5800_v3_firmware v300r002c10	NCM
Vulnerabilities CVE-2017-8157 are affected in oceanstor_5800_v3_firmware v300r002c00	NCM
Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2017-8157)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234