Skip to content
OpenAdvisories
Unscored CVE-2017-8193 EUVD-2017-17155GHSA-54gh-5r45-9v33

The FusionSphere OpenStack V100R006C00SPC102(NFV) has a command injection vulnerability. Due to the insufficient input validation on one po…

Published Nov 22, 2017 · Updated Sep 17, 2024 · Assigned by huawei

Vendor: Huawei Product: FusionSphere OpenStack Category: Network devices

Description

The FusionSphere OpenStack V100R006C00SPC102(NFV) has a command injection vulnerability. Due to the insufficient input validation on one port, an authenticated, local attacker may exploit the vulnerability to gain root privileges by sending message with malicious commands.

Affected products

VendorProductAffectedFixed
Huawei Technologies FusionSphere OpenStack V100R006C00SPC102(NFV) —

References