CVE-2017-2718

CVE-2017-2718 affects Huawei FusionSphere/OpenStack deployments (V100R006C00, V100R006C10RC2). The defect is two command injection vulnerabilities caused by insufficient input validation on a single port, enabling an attacker to obtain root privileges by sending specially crafted messages. Public...

CVE-2017-8168

CVE-2017-8168 affects Huawei FusionSphere OpenStack (FusionSphere OpenStack) with software V100R006C00SPC102(NFV) and V100R006C10. The root cause is an incorrect configuration item that leaves information transmitted over a channel unencrypted, allowing an attacker with internal-network access to...

CVE-2017-8134

The CVE-2017-8134 entry concerns Huawei FusionSphere OpenStack (software versions V100R006C00 and V100R006C10) with four TCP listening ports vulnerable to command injection caused by insufficient input validation. The vulnerability allows an unauthenticated attacker to execute malicious commands ...

CVE-2017-8132

CVE-2017-8132 affects Huawei FusionSphere OpenStack (software versions V100R006C00 and V100R006C10). The vulnerability is a command injection due to insufficient input validation on four TCP listening ports, allowing an unauthenticated attacker to gain root privileges by sending malicious command...

CVE-2017-8135

CVE-2017-8135 affects Huawei FusionSphere/OpenStack (V100R006C00/C10). The root cause is insufficient input validation on four TCP listening ports, enabling an unauthenticated attacker to inject commands and gain root privileges. The vulnerability is documented across multiple sources (NVD, CVE l...

CVE-2017-8131

The CVE-2017-8131 entry applies to FusionSphere OpenStack (software versions V100R006C00/V100R006C10). It describes a command injection vulnerability caused by insufficient input validation on four TCP listening ports, allowing an unauthenticated attacker to execute commands and gain root privile...