CWE Code: 732
Vulnerability Type: privilege_escalation
CVSS Score: 2.9
CWE Name:  Incorrect Permission Assignment for Critical Resource
Summary: huawei oceanstor 2800 v3, v300r003c00, v300r003c20, oceanstor 5300 v3, v300r003c00, v300r003c10, v300r003c20, oceanstor 5500 v3, v300r003c00, v300r003c10, v300r003c20, oceanstor 5600 v3, v300r003c00, v300r003c10, v300r003c20, oceanstor 5800 v3, v300r003c00, v300r003c10, v300r003c20 have an improper access control vulnerability. due to incorrectly restrict access to a resource, an attacker with high privilege may exploit the vulnerability to query some information or send specific message to cause some service abnormal.
Access Authentication: SINGLE
Access Complexity: HIGH
Access Vector: ADJACENT_NETWORK
Impact (C/I/A): PARTIAL/NONE/PARTIAL
Published Date: 2018-02-15
Last Modified Date: 2019-10-03
You are a cybersecurity expert assistant. Provide detailed information about vulnerabilities in a clear and structured format.
system
Please provide details about this vulnerability:  Incorrect Permission Assignment for Critical Resource.
user
CWE Code: 732
Vulnerability Type: privilege_escalation
CVSS Score: 2.9
CWE Name:  Incorrect Permission Assignment for Critical Resource
Summary: huawei oceanstor 2800 v3, v300r003c00, v300r003c20, oceanstor 5300 v3, v300r003c00, v300r003c10, v300r003c20, oceanstor 5500 v3, v300r003c00, v300r003c10, v300r003c20, oceanstor 5600 v3, v300r003c00, v300r003c10, v300r003c20, oceanstor 5800 v3, v300r003c00, v300r003c10, v300r003c20 have an improper access control vulnerability. due to incorrectly restrict access to a resource, an attacker with high privilege may exploit the vulnerability to query some information or send specific message to cause some service abnormal.
Access Authentication: SINGLE
Access Complexity: HIGH
Access Vector: ADJACENT_NETWORK
Impact (C/I/A): PARTIAL/NONE/PARTIAL
Published Date: 2018-02-15
Last Modified Date: 2019-10-03
assistant