CVE-2017-8193
HighSummary
FusionSphere OpenStack V100R006C00SPC102 (NFV) has a command injection vulnerability. Due to insufficient input validation on one port, an authenticated, local attacker may exploit the vulnerability to gain root privileges by sending messages with malicious commands.
Risk Assessment
This vulnerability could allow a local attacker to gain full control over the system, posing a serious security threat to the organization.
Recommendation
It is recommended to implement proper input validation mechanisms and monitor system access to minimize the risk of exploitation of this vulnerability.
Other vulnerabilities in FusionSphere OpenStack V100R006C00SPC102 (NFV)
See all- CVE-2017-8195High
FusionSphere OpenStack V100R006C00SPC102(NFV) has an authentication vulnerability that allows improper authentication. Due to this vulnerability, an authenticated remote attacker may exploit it to perform additional operations by sending a crafted REST message.
- CVE-2017-8194High
FusionSphere OpenStack V100R006C00SPC102 (NFV) has an improper authentication vulnerability. An authenticated remote attacker may exploit this vulnerability to perform additional operations by sending a crafted REST message.
- CVE-2017-8188High
FusionSphere OpenStack V100R006C00SPC102 (NFV) has a command injection vulnerability. Due to lack of validation, an attacker with high privilege may inject malicious code into some module of the affected products, causing code execution.
Original NVD description (English source)
The FusionSphere OpenStack V100R006C00SPC102(NFV) has a command injection vulnerability. Due to the insufficient input validation on one port, an authenticated, local attacker may exploit the vulnerability to gain root privileges by sending message with malicious commands.