CVE-2017-8198
HighSummary
FusionSphere V100R006C00SPC102 (NFV) has an SQL injection vulnerability. An authenticated, remote attacker could craft interface messages carrying malicious SQL statements and send them to a target device.
Risk Assessment
Successful exploit could allow the attacker to launch an SQL injection attack and execute SQL commands, potentially leading to data exposure or system compromise.
Recommendation
It is recommended to update the software to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.
Other vulnerabilities in FusionSphere V100R006C00SPC102 (NFV)
Original NVD description (English source)
FusionSphere V100R006C00SPC102(NFV) has an SQL injection vulnerability. An authenticated, remote attacker could craft interface messages carrying malicious SQL statements and send them to a target device. Successful exploit could allow the attacker to launch an SQL injection attack and execute SQL commands.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS