Vulnerability Details CVE-2016-8754
Huawei OceanStor 5600 V3 V300R003C00 has a hardcoded SSH key vulnerability; the hardcoded keys are used to encrypt communication data and authenticate different nodes of the devices. An attacker may obtain the hardcoded keys and log in to such a device through SSH.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 24.5%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.4
References
Products affected by CVE-2016-8754
-
cpe:2.3:h:huawei:oceanstor_5600_v3:-
-
cpe:2.3:o:huawei:oceanstor_5600_v3_firmware:v300r003c00