CVE-2017-3580
HighSummary
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite that allows an unauthenticated attacker to remotely compromise the device. It requires interaction from a third party, making exploitation more difficult.
Risk Assessment
An attack leading to the takeover of the Sun ZFS Storage Appliance Kit (AK) could significantly impact data security and the availability of other products within the organization.
Recommendation
It is recommended to update to the latest software version and monitor access to devices to minimize the risk of exploitation of this vulnerability.
Other vulnerabilities in Sun ZFS Storage Appliance Kit (AK)
See all- CVE-2017-10016High
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite, affecting the user interface. It allows an unauthenticated attacker with network access via HTTP to compromise the Sun ZFS Storage Appliance Kit (AK), requiring interaction from a person other than the attacker.
- CVE-2017-10013High
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite, affecting the user interface. It allows an unauthenticated attacker with network access via HTTP to compromise Sun ZFS Storage Appliance Kit (AK), requiring interaction from a person other than the attacker.
- CVE-2017-3621High
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite, concerning IPC frameworks. It allows an unauthenticated attacker with network access to remotely compromise the system, potentially leading to hangs or frequent crashes (complete DOS) of the device.
- CVE-2017-3584High
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite that can be exploited by a low privileged attacker. Although the vulnerability is in Sun ZFS Storage Appliance Kit (AK), attacks may significantly impact additional products.
- CVE-2017-3578High
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite, affecting version AK 2013. It allows a low privileged attacker with logon to the infrastructure to compromise Sun ZFS Storage Appliance Kit (AK).
Original NVD description (English source)
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: RAS subsystems). The supported version that is affected is AK 2013. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Sun ZFS Storage Appliance Kit (AK). Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Sun ZFS Storage Appliance Kit (AK), attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Sun ZFS Storage Appliance Kit (AK). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).