CVE-2017-8188
HighSummary
FusionSphere OpenStack V100R006C00SPC102 (NFV) has a command injection vulnerability. Due to lack of validation, an attacker with high privilege may inject malicious code into some module of the affected products, causing code execution.
Risk Assessment
This vulnerability may lead to unauthorized code execution, posing a serious threat to the security of the system and the organization's data.
Recommendation
It is recommended to update to the latest version of the software and implement appropriate input validation mechanisms to minimize the risk of command injection.
Other vulnerabilities in FusionSphere OpenStack V100R006C00SPC102 (NFV)
See all- CVE-2017-8195High
FusionSphere OpenStack V100R006C00SPC102(NFV) has an authentication vulnerability that allows improper authentication. Due to this vulnerability, an authenticated remote attacker may exploit it to perform additional operations by sending a crafted REST message.
- CVE-2017-8194High
FusionSphere OpenStack V100R006C00SPC102 (NFV) has an improper authentication vulnerability. An authenticated remote attacker may exploit this vulnerability to perform additional operations by sending a crafted REST message.
- CVE-2017-8193High
FusionSphere OpenStack V100R006C00SPC102 (NFV) has a command injection vulnerability. Due to insufficient input validation on one port, an authenticated, local attacker may exploit the vulnerability to gain root privileges by sending messages with malicious commands.
Original NVD description (English source)
FusionSphere OpenStack V100R006C00SPC102(NFV)has a command injection vulnerability. Due to lack of validation, an attacker with high privilege may inject malicious code into some module of the affected products, causing code execution.