Command injection

The FusionSphere OpenStack V100R006C00SPC102NFV has a command injection vulnerability. Due to the insufficient input validation on one port, an authenticated, local attacker may exploit the vulnerability to gain root privileges by sending message with malicious commands...

Design/Logic Flaw

FusionSphere OpenStack V100R006C00SPC102NFVhas a week cryptographic algorithm vulnerability. Attackers may exploit the vulnerability to crack the cipher text and cause information leak on the transmission links...

Authentication flaw

The FusionSphere OpenStack V100R006C00SPC102NFV has an improper authentication vulnerability. Due to improper authentication on one port, an authenticated, remote attacker may exploit the vulnerability to execute more operations by send a crafted rest message...

Authentication flaw

The FusionSphere OpenStack V100R006C00SPC102NFV has an improper authentication vulnerability. Due to improper authentication on one port, an authenticated, remote attacker may exploit the vulnerability to execute more operations by send a crafted rest message...

CVE-2017-8196

FusionSphere V100R006C00SPC102NFV has an incorrect authorization vulnerability. An authenticated attacker could execute commands that he/she should have had no permission to perform, thereby querying, modifying, and deleting certain service data and making the service unavailable...

CVE-2017-8196

CVE-2017-8196 is described in Huawei’s Huawei-PSIRT advisory HWPSIRT-2017-06166 as an incorrect authorization vulnerability in Huawei FusionSphere, affecting FusionSphere V100R006C00SPC102 (NFV). An authenticated attacker could execute commands they should not have permission for, enabling queryi...

CVE-2017-8195

The FusionSphere OpenStack V100R006C00SPC102NFV has an improper authentication vulnerability. Due to improper authentication on one port, an authenticated, remote attacker may exploit the vulnerability to execute more operations by send a crafted rest message...

CVE-2017-8194

CVE-2017-8194 affects FusionSphere OpenStack V100R006C00SPC102 (NFV). An improper authentication on a single port lets an authenticated, remote attacker send a crafted REST message to perform additional operations. The CVE entry includes a high-level impact (partial to high confidentiality/integr...

CVE-2017-8189

CVE-2017-8189 is a path traversal vulnerability in Huawei FusionSphere OpenStack, affecting FusionSphere OpenStack V100R006C00SPC102 (NFV). Root cause: insufficient path validation. A high-privilege attacker could traverse paths and overwrite/cover files, leading to service disruption (as per Hua...

CVE-2017-8191

The CVE-2017-8191 entry affects FusionSphere OpenStack (FusionSphere OpenStack V100R006C00SPC102 NFV). Description confirms a weak/cryptographic algorithm vulnerability that can allow attackers to crack ciphertext and cause information leakage on transmission links (impact: confidentiality). The ...

CVE-2017-8190

CVE-2017-8190 is reported for FusionSphere OpenStack (V100R006C00SPC102 NFV) with an improper verification of cryptographic signatures. The underlying issue is that the software does not verify the cryptographic signature, enabling a high-privilege attacker to inject malicious software. The NVD e...

CVE-2017-8193

The CVE-2017-8193 issue affects FusionSphere OpenStack (V100R006C00SPC102 NFV). The root cause is insufficient input validation on a single port, allowing an authenticated, local attacker to inject commands and gain root privileges. The vulnerability is confirmed by multiple sources (NVD entry an...

CVE-2017-8197

The CVE-2017-8197 issue affects Huawei FusionSphere V100R006C00SPC102 (NFV). Affected component: command injection vulnerability in FusionSphere due to insufficient input validation, exploitable by an authenticated, remote attacker sending packets containing malicious strings to the device. Succe...

CVE-2017-8195

CVE-2017-8195 affects Huawei FusionSphere OpenStack V100R006C00SPC102 (NFV). An improper authentication issue on one port allows an authenticated remote attacker to perform additional operations by sending a crafted REST message, leading to elevated access (confidentiality/integrity/availability ...

CVE-2017-8198

FusionSphere V100R006C00SPC102NFV has an SQL injection vulnerability. An authenticated, remote attacker could craft interface messages carrying malicious SQL statements and send them to a target device. Successful exploit could allow the attacker to launch an SQL injection attack and execute SQL...

Fast Packet Networking Toolkit: Snabb Switch

Snabb Switch is open source software for solving novel problems in networking. Blending the latest techniques for high-performance x86 packet processing together with a high-level LuaJIT programming interface. The goal is to offer the easiest way to create and deploy new network functions in larg...

Bohatei - Flexible and Elastic DDoS Defense

Bohatei is a first of its kind platform that enables flexible and elastic DDoS defense using SDN and NFV. The repository contains a first version of the components described in the Bohatei paper, as well as a web-based User Interface. The backend folder consists of : an implementation of the...