CVE-2017-8188: Command Injection
First published: Wed Nov 22 2017(Updated: )
FusionSphere OpenStack V100R006C00SPC102(NFV)has a command injection vulnerability. Due to lack of validation, an attacker with high privilege may inject malicious code into some module of the affected products, causing code execution.
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei FusionSphere OpenStack | =v100r006c00spc102\(nfv\) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this command injection vulnerability?
The vulnerability ID for this command injection vulnerability is CVE-2017-8188.
What is the severity level of CVE-2017-8188?
The severity level of CVE-2017-8188 is high with a score of 7.2.
What is the affected software for CVE-2017-8188?
The affected software for CVE-2017-8188 is Huawei FusionSphere OpenStack V100R006C00SPC102(NFV) with a version of v100r006c00spc102.
What is the potential impact of CVE-2017-8188?
CVE-2017-8188 can allow an attacker with high privilege to inject malicious code into affected products, leading to code execution.
Is there a fix available for CVE-2017-8188?
Please refer to the following reference link for more information on available fixes: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en
- collector/nvd-index
- agent/event
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/type
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/huawei
- canonical/huawei fusionsphere openstack
- version/huawei fusionsphere openstack/v100r006c00spc102\(nfv\)