CVE-2017-8131

The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP…

published November 22, 2017

CVSS
—
EPSS
1%
Percentile
71.4
In the wild
Unconfirmed
What it is

The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit the vulnerabilities to gain root privileges by sending some messages with malicious commands.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01366 · 71.4th percentile
Published
2017-11-22T19:00Z
EPSS history
Timeline
  • 22 NOV 19:00Z
    The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP…
    cvelistv5