Back to CVE Browser

CVE-2018-2930

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0970%

EPSS Percentile27.53th

PublishedJul 18, 2018

Last ModifiedNov 21, 2024

Vulnerability Description

Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: NAS device addition). Supported versions that are affected are 3.3 and 4.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via RPC to compromise Solaris Cluster. Successful attacks of this vulnerability can result in takeover of Solaris Cluster. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Affected Platforms (CPE)

📦

Oracle

Solaris Cluster

= 3.3

📦

Oracle

Solaris Cluster

= 4.3

References & Advisories

🔗 http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html

🔗 http://www.securityfocus.com/bid/104777

🔗 http://www.securitytracker.com/id/1041303

🔗 http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html

🔗 http://www.securityfocus.com/bid/104777

🔗 http://www.securitytracker.com/id/1041303

Related Vulnerabilities

CVE-2014-42599.0

Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 and 4.1 allows remote authenti...

CVE-2002-18177.5

Unknown vulnerability in Veritas Cluster Server (VCS) 1.2 for WindowsNT, Cluster Server 1.3.0 for Solaris, and Cluster Server 1.3....

CVE-2017-102347.3

Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: NAS device addition). The suppo...

CVE-2017-35887.3

Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: HA for MySQL). Supported versio...