← Vulnerability feed

Vulnerability record · CVE-2017-8157 · published 22 November 2017

CVE-2017-8157: Huawei oceanstor 5800 v3 firmware broken cryptographic algorithm vulnerability

Huawei · Oceanstor 5800 V3 Firmware

OceanStor 5800 V3 with software V300R002C00 and V300R002C10, OceanStor 6900 V3 V300R001C00 has an information leakage vulnerability. Products use TLS1.0 to encrypt. Attackers can exploit TLS1.0's vulnerabilities to decrypt data to obtain sensitive information.

5.9 CVSS 3.0 Medium EPSS 0.57% · top 52.5% CWE-327 · Broken cryptographic algorithm
5.9CVSS 3.0 base score, v2 4.3
0.57%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

OceanStor 5800 V3 with software V300R002C00 and V300R002C10, OceanStor 6900 V3 V300R001C00 has an information leakage vulnerability. Products use TLS1.0 to encrypt. Attackers can exploit TLS1.0's vulnerabilities to decrypt data to obtain sensitive information.

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170920-01-oceanstor-en Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170920-01-oceanstor-en Vendor Advisory

Track CVE-2017-8157 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.1CVE-2016-3081Apache Struts 2 DMI method: prefix remote code executionApache Struts 2.3.19 through 2.3.28 permits remote code execution when Dynamic Method Invocation is enabled, because the method: prefix can be abused…KEVEPSS 97%analysed6.5CVE-2016-6177Huawei oceanstor 5800 v3 firmware integer overflow vulnerabilityThe Huawei OceanStor 5800 V300R003C00 has an integer overflow vulnerability. An authenticated attacker may send massive abnormal Network File System …EPSS 0.62%

Source: NIST National Vulnerability Database (record CVE-2017-8157), CISA KEV, FIRST EPSS (scores of 2026-11-11). This page is refreshed as NVD updates the record.