CVE-2017-2719

FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one…

published November 22, 2017

CVSS
—
EPSS
1%
Percentile
60.0
In the wild
Unconfirmed
What it is

FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one port. An attacker can exploit the vulnerabilities to gain root privileges by sending some messages with malicious commands.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00923 · 60.0th percentile
Published
2017-11-22T19:00Z
EPSS history
Timeline
  • 22 NOV 19:00Z
    FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one…
    cvelistv5