Huawei Oceanstor 18800F vulnerabilities

3 vulnerabilities

Known vulnerabilities in Huawei Oceanstor 18800F, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5CVE-2015-2808canonicalubuntu_linux+62
EPSS score
73.85%
The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue.9.3CVE-2016-3081apachestruts+20KEV
EPSS score
96.05%
Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.10CVE-2019-0708huaweiagile_controller-campus+45KEVRansomware
EPSS score
100.00%
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.