CVE-2017-8188

CWE-77Command Injection3 documents3 sources
Severity
7.2HIGH
EPSS
0.5%
top 32.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedNov 22
Latest updateMay 17

Description

FusionSphere OpenStack V100R006C00SPC102(NFV)has a command injection vulnerability. Due to lack of validation, an attacker with high privilege may inject malicious code into some module of the affected products, causing code execution.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9

Affected Packages2 packages

NVDhuawei/fusionsphere_openstackv100r006c00spc102\(nfv\)

🔴Vulnerability Details

2
GHSA
GHSA-q8h6-q93m-28h6: FusionSphere OpenStack V100R006C00SPC102(NFV)has a command injection vulnerability2022-05-17
CVEList
CVE-2017-8188: FusionSphere OpenStack V100R006C00SPC102(NFV)has a command injection vulnerability2017-11-22
CVE-2017-8188 (HIGH CVSS 7.2) | FusionSphere OpenStack V100R006C00S | cvebase.io