CVE-2017-8193 The FusionSphere OpenStack V100R006C00SPC102(NFV) has a command injection vulnerability. Due to the insufficient input validation on one port, an authenticated, local attacker may exploit the vulnerab...
HighCVSS 8.0
EPSS 0.87%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The FusionSphere OpenStack V100R006C00SPC102(NFV) has a command injection vulnerability. Due to the insufficient input validation on one port, an authenticated, local attacker may exploit the vulnerability to gain root privileges by sending message with malicious commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Huawei fusionsphere openstack | = v100r006c00spc102(nfv) | No fix listed |
| Huawei Technologies Co., Ltd. FusionSphere OpenStack | = V100R006C00SPC102(NFV) | No fix listed |
References
- www.huawei.com vendor-advisory