CVE-2017-3621
HighSummary
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite, concerning IPC frameworks. It allows an unauthenticated attacker with network access to remotely compromise the system, potentially leading to hangs or frequent crashes (complete DOS) of the device.
Risk Assessment
An attacker can exploit this vulnerability to disrupt the operation of the Sun ZFS Storage Appliance Kit, which may lead to significant availability issues for the organization's services.
Recommendation
It is recommended to update to the latest version of the software to mitigate the risks associated with this vulnerability and to monitor the system for unauthorized access.
Other vulnerabilities in Sun ZFS Storage Appliance Kit (AK)
See all- CVE-2017-10016High
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite, affecting the user interface. It allows an unauthenticated attacker with network access via HTTP to compromise the Sun ZFS Storage Appliance Kit (AK), requiring interaction from a person other than the attacker.
- CVE-2017-10013High
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite, affecting the user interface. It allows an unauthenticated attacker with network access via HTTP to compromise Sun ZFS Storage Appliance Kit (AK), requiring interaction from a person other than the attacker.
- CVE-2017-3584High
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite that can be exploited by a low privileged attacker. Although the vulnerability is in Sun ZFS Storage Appliance Kit (AK), attacks may significantly impact additional products.
- CVE-2017-3580High
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite that allows an unauthenticated attacker to remotely compromise the device. It requires interaction from a third party, making exploitation more difficult.
- CVE-2017-3578High
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite, affecting version AK 2013. It allows a low privileged attacker with logon to the infrastructure to compromise Sun ZFS Storage Appliance Kit (AK).
Original NVD description (English source)
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: IPC Frameworks). The supported version that is affected is AK 2013. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Sun ZFS Storage Appliance Kit (AK). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Sun ZFS Storage Appliance Kit (AK). CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).