CVE-2017-8198 FusionSphere V100R006C00SPC102(NFV) has an SQL injection vulnerability. An authenticated, remote attacker could craft interface messages carrying malicious SQL statements and send them to a target dev...
HighCVSS 7.2
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
FusionSphere V100R006C00SPC102(NFV) has an SQL injection vulnerability. An authenticated, remote attacker could craft interface messages carrying malicious SQL statements and send them to a target device. Successful exploit could allow the attacker to launch an SQL injection attack and execute SQL commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Huawei fusionsphere | = v100r006c00spc102(nfv) | No fix listed |
| Huawei Technologies Co., Ltd. FusionSphere | = V100R006C00SPC102(NFV) | No fix listed |
References
- www.huawei.com vendor-advisory