Security Advisory - Privilege Escalation Vulnerability in Some Huawei Storage Products

Some Huawei storage products have a privilege escalation vulnerability due to the lack of input validation. Attackers with administrator privilege could inject command into specific command’s parameters, and run this injected command with root privilege. (Vulnerability ID: HWPSIRT-2016-05004)

This vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2016-8801.
Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161207-01-storage-en