CVE-2017-8193

high

Description

The FusionSphere OpenStack V100R006C00SPC102(NFV) has a command injection vulnerability. Due to the insufficient input validation on one port, an authenticated, local attacker may exploit the vulnerability to gain root privileges by sending message with malicious commands.

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170830-01-OpenStack-en

Details

Source: Mitre, NVD

Published: 2017-11-22

Updated: 2025-04-20

Risk Information

CVSS v2

Base Score: 7.7

Vector: CVSS2#AV:A/AC:L/Au:S/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 8

Vector: CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H