CVE-2016-8754: Huawei Oceanstor 5600 v3 Firmware

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Huawei OceanStor 5600 V3 V300R003C00 has a hardcoded SSH key vulnerability; the hardcoded keys are used to encrypt communication data and authenticate different nodes of the devices. An attacker may obtain the hardcoded keys and log in to such a device through SSH.

Affected products

• Huawei Oceanstor 5600 v3 Firmware: version v300r003c00 only

Published 2017-04-02. Last modified 2026-06-17.