Huawei Fusionsphere Openstack vulnerabilities, page 2
22 vulnerabilities
Known vulnerabilities in Huawei Fusionsphere Openstack, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2017-8192huawei technologies co., ltd.fusionsphere openstack+1
EPSS score0.22%
FusionSphere OpenStack V100R006C00 has an improper authorization vulnerability. Due to improper authorization, an attacker with low privilege may exploit this vulnerability to obtain the operation authority of some specific directory, causing privilege escalation.CVE-2017-8135huawei technologies co., ltd.fusionsphere openstack+1EPSS score1.42%
The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit the vulnerabilities to gain root privileges by sending some messages with malicious commands.