Lucene search

K
huaweiHuawei TechnologiesHUAWEI-SA-20160815-01-FUSIONCOMPUTE
HistoryAug 15, 2016 - 12:00 a.m.

Security Advisory - Cleartext Storage of Crytographic Key Vulnerability in FusionCompute

2016-08-1500:00:00
Huawei Technologies
www.huawei.com
17

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

46.3%

FusionCompute has a key cleartext storage vulnerability. Successful exploit could allow an attacker to obtain AES keys. (Vulnerability ID: HWPSIRT-2016-06076)

This vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2016-6827.

Huawei has released software updates to fix these vulnerabilities. This advisory is available at the following link:

<http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160815-01-fusioncompute-en&gt;

Affected configurations

Vulners
Node
huaweifusioncompute_firmwareMatchv100r003c10
VendorProductVersionCPE
huaweifusioncompute_firmwarev100r003c10cpe:2.3:o:huawei:fusioncompute_firmware:v100r003c10:*:*:*:*:*:*:*

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

46.3%

Related for HUAWEI-SA-20160815-01-FUSIONCOMPUTE