CVE-2017-2719
HighSummary
FusionSphere OpenStack versions V100R006C00 and V100R006C10RC2 have two command injection vulnerabilities due to insufficient input validation on one port. An attacker can exploit these vulnerabilities to gain root privileges by sending messages with malicious commands.
Risk Assessment
Exploitation of these vulnerabilities could lead to an attacker gaining full control over the system, posing a serious security threat to the organization.
Recommendation
It is recommended to update FusionSphere OpenStack to the latest version that includes security patches and to implement additional input validation mechanisms.
Other vulnerabilities in FusionSphere OpenStack
See all- CVE-2017-8135High
FusionSphere OpenStack versions V100R006C00 and V100R006C10 have a command injection vulnerability due to insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit this vulnerability to gain root privileges by sending malicious commands.
- CVE-2017-8134High
FusionSphere OpenStack versions V100R006C00 and V100R006C10 have a command injection vulnerability due to insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit the vulnerabilities to gain root privileges by sending malicious commands.
- CVE-2017-8132High
FusionSphere OpenStack versions V100R006C00 and V100R006C10 have a command injection vulnerability due to insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit these vulnerabilities to gain root privileges by sending malicious commands.
- CVE-2017-8131High
FusionSphere OpenStack versions V100R006C00 and V100R006C10 have a command injection vulnerability due to insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit this vulnerability by sending malicious commands to gain root privileges.
- CVE-2017-2718High
FusionSphere OpenStack versions V100R006C00 and V100R006C10RC2 have two command injection vulnerabilities due to insufficient input validation on one port. An attacker can exploit these vulnerabilities to gain root privileges by sending messages with malicious commands.
Original NVD description (English source)
FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one port. An attacker can exploit the vulnerabilities to gain root privileges by sending some messages with malicious commands.