CVE-2017-8132: Command Injection
First published: Wed Nov 22 2017(Updated: )
The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit the vulnerabilities to gain root privileges by sending some messages with malicious commands.
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei FusionSphere OpenStack | =v100r006c00 | |
| Huawei FusionSphere OpenStack | =v100r006c10 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2017-8132?
CVE-2017-8132 is a command injection vulnerability in the FusionSphere OpenStack software versions V100R006C00 and V100R006C10.
What is the severity of CVE-2017-8132?
CVE-2017-8132 has a severity rating of 8.8, which is classified as high.
How does the command injection vulnerability in CVE-2017-8132 occur?
The command injection vulnerability in CVE-2017-8132 occurs due to insufficient input validation on four TCP listening ports.
What is the impact of CVE-2017-8132?
An unauthenticated attacker can exploit CVE-2017-8132 to gain root privileges by sending malicious messages.
How can I fix CVE-2017-8132?
To fix CVE-2017-8132, it is recommended to update the FusionSphere OpenStack software to a patched version.
- collector/nvd-index
- agent/weakness
- agent/type
- agent/references
- agent/severity
- agent/author
- agent/tags
- agent/event
- agent/description
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/huawei
- canonical/huawei fusionsphere openstack
- version/huawei fusionsphere openstack/v100r006c00
- version/huawei fusionsphere openstack/v100r006c10