Sun ZFS Storage Appliance Kit (AK) vulnerabilities

6 known CVE vulnerabilities in Sun ZFS Storage Appliance Kit (AK), translated and rated.

CVE-2017-10016High
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite, affecting the user interface. It allows an unauthenticated attacker with network access via HTTP to compromise the Sun ZFS Storage Appliance Kit (AK), requiring interaction from a person other than the attacker.
CVE-2017-10013High
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite, affecting the user interface. It allows an unauthenticated attacker with network access via HTTP to compromise Sun ZFS Storage Appliance Kit (AK), requiring interaction from a person other than the attacker.
CVE-2017-3621High
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite, concerning IPC frameworks. It allows an unauthenticated attacker with network access to remotely compromise the system, potentially leading to hangs or frequent crashes (complete DOS) of the device.
CVE-2017-3584High
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite that can be exploited by a low privileged attacker. Although the vulnerability is in Sun ZFS Storage Appliance Kit (AK), attacks may significantly impact additional products.
CVE-2017-3580High
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite that allows an unauthenticated attacker to remotely compromise the device. It requires interaction from a third party, making exploitation more difficult.
CVE-2017-3578High
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite, affecting version AK 2013. It allows a low privileged attacker with logon to the infrastructure to compromise Sun ZFS Storage Appliance Kit (AK).