CVE-2016-8803 : The maintenance module in Huawei FusionStorage V100R003C30U1 allows attackers to create documents according to special r

The maintenance module in Huawei FusionStorage V100R003C30U1 allows attackers to create documents according to special rules to obtain the OS root privilege of FusionStorage.

Published 2017-04-02 20:59:02

Updated 2017-04-05 23:39:38

Source Huawei Technologies

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2016-8803

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 10 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2016-8803

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.1	MEDIUM	AV:L/AC:M/Au:S/C:P/I:P/A:P	2.7	6.4	NIST
Access Vector: Local Access Complexity: Medium Authentication: Single Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
7.5	HIGH	CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H	0.8	6.0	NIST
Attack Vector: Local Attack Complexity: High Privileges Required: Low User Interaction: Required Scope: Changed Confidentiality: High Integrity: High Availability: High

References for CVE-2016-8803

http://www.securityfocus.com/bid/94507

Huawei FusionStorage CVE-2016-8803 Local Privilege Escalation Vulnerability
Third Party Advisory;VDB Entry
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161123-01-fusionstorage-en

Security Advisory - Privilege Escalation Vulnerability in the FusionStorage
Vendor Advisory

Products affected by CVE-2016-8803

Huawei » Fusionstorage » Version: V100r003c30u1
cpe:2.3:a:huawei:fusionstorage:v100r003c30u1:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2016-8803

Exploit prediction scoring system (EPSS) score for CVE-2016-8803

CVSS scores for CVE-2016-8803

CWE ids for CVE-2016-8803

References for CVE-2016-8803

Products affected by CVE-2016-8803