CVE-2016-8754

Name: CVE-2016-8754
Creator: NVD / NIST
Published: 2017-04-02T20:59:01.077+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.37%

Last modified Jun 17, 2026

CVE-2016-8754 is a vulnerability of currently unknown severity. Huawei OceanStor 5600 V3 V300R003C00 has a hardcoded SSH key vulnerability; the hardcoded keys are used to encrypt communication data and authenticate different nodes of the devices. An attacker may obtain the hardcoded keys and log in to such a device through SSH.. EPSS estimates a 0.37% chance of exploitation in the next 30 days.

Description

Huawei OceanStor 5600 V3 V300R003C00 has a hardcoded SSH key vulnerability; the hardcoded keys are used to encrypt communication data and authenticate different nodes of the devices. An attacker may obtain the hardcoded keys and log in to such a device through SSH.

Metrics

EPSS Probability

0.37%

29.1th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-798

Affected Software

Vendor	Product	Versions
Huawei	Oceanstor 5600 V3 Firmware	v300r003c00

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161017-01-storage-enVendor Advisory
http://www.securityfocus.com/bid/93607Third Party Advisory, VDB Entry
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161017-01-storage-enVendor Advisory
http://www.securityfocus.com/bid/93607Third Party Advisory, VDB Entry

Timeline

Published: Apr 2, 2017
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2016-8754?

How severe is CVE-2016-8754?

Severity scoring for CVE-2016-8754 is pending analysis. The EPSS model estimates a 0.37% probability of exploitation in the next 30 days.

How do I fix CVE-2016-8754?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2016-8754?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST