CVE-2017-8193

The FusionSphere OpenStack V100R006C00SPC102(NFV) has a command injection vulnerability. Due to the insufficient input validation on one port, an authenticated, local attacker may exploit the vulnerability to gain root privileges by sending message with malicious commands.

Score

CVSS 3.0 8.0 High

Status

Modified - psirt@huawei.com

Published

2017-11-22

Last modified

2024-09-17

Weaknesses

CWE-77

Affected products

• Fusionsphere Openstack (Huawei)
• Fusionsphere Openstack (Huawei Technologies Co. Ltd.)

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170830-01-OpenStack-en