CVE-2017-8132

published 2017-11-22

CVE-2017-8132: The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP…

Priority P3 52 high 8.8 CVSS 3.0

AV A AC L PR N UI N S U C H I H A H

The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit the vulnerabilities to gain root privileges by sending some messages with malicious commands.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
huawei	fusionsphere_openstack	—	—
huawei	fusionsphere_openstack	—	—
huawei_technologies_co_ltd	fusionsphere_openstack	—	—

CVSS provenance

nvd v3.0 8.8 HIGH CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 8.3 HIGH AV:A/AC:L/Au:N/C:C/I:C/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-77