CVE-2017-10016
HighSummary
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite, affecting the user interface. It allows an unauthenticated attacker with network access via HTTP to compromise the Sun ZFS Storage Appliance Kit (AK), requiring interaction from a person other than the attacker.
Risk Assessment
An attacker could take control of the system, leading to serious threats to the confidentiality, integrity, and availability of data. The requirement for user interaction may limit the risk but does not eliminate it entirely.
Recommendation
It is recommended to update to the latest version of the software and implement additional security measures to minimize the risk of attack. User training on recognizing potential threats should also be conducted.
Other vulnerabilities in Sun ZFS Storage Appliance Kit (AK)
See all- CVE-2017-10013High
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite, affecting the user interface. It allows an unauthenticated attacker with network access via HTTP to compromise Sun ZFS Storage Appliance Kit (AK), requiring interaction from a person other than the attacker.
- CVE-2017-3621High
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite, concerning IPC frameworks. It allows an unauthenticated attacker with network access to remotely compromise the system, potentially leading to hangs or frequent crashes (complete DOS) of the device.
- CVE-2017-3584High
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite that can be exploited by a low privileged attacker. Although the vulnerability is in Sun ZFS Storage Appliance Kit (AK), attacks may significantly impact additional products.
- CVE-2017-3580High
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite that allows an unauthenticated attacker to remotely compromise the device. It requires interaction from a third party, making exploitation more difficult.
- CVE-2017-3578High
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite, affecting version AK 2013. It allows a low privileged attacker with logon to the infrastructure to compromise Sun ZFS Storage Appliance Kit (AK).
Original NVD description (English source)
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface). The supported version that is affected is AK 2013. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Sun ZFS Storage Appliance Kit (AK). Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Sun ZFS Storage Appliance Kit (AK). CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).