CVE-2017-8198

FusionSphere V100R006C00SPC102(NFV) is affected by an SQL injection due to insufficient input validation in an interface message handler. An authenticated, remote attacker could craft messages carrying malicious SQL and send them to a target device, potentially executing arbitrary SQL commands wi...