CVE-2015-2254

9.1 criticalEPSS 0.9%

Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to capture and change patch loading information resulting in the deletion of directory files and compromise of system functions when loading a patch.

Severity

CVSS 3.0

9.1 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2019-03-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

huawei:oceanstor_uds_firmware

References

https://www.huawei.com/en/psirt/security-advisories/hw-417839
https://www.huawei.com/en/psirt/security-advisories/hw-417839

Check your stack JSON