Huawei Technologies Co., Ltd. Fusionsphere vulnerabilities

3 vulnerabilities

Known vulnerabilities in Huawei Technologies Co., Ltd. Fusionsphere, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.6CVE-2017-8196huawei technologies co., ltd.fusionsphere+1
EPSS score
0.26%
FusionSphere V100R006C00SPC102(NFV) has an incorrect authorization vulnerability. An authenticated attacker could execute commands that he/she should have had no permission to perform, thereby querying, modifying, and deleting certain service data and making the service unavailable.9CVE-2017-8197huawei technologies co., ltd.fusionsphere+1
EPSS score
2.04%
FusionSphere V100R006C00SPC102(NFV) has a command injection vulnerability. An authenticated, remote attacker could craft packets with malicious strings and send them to a target device. Successful exploit could allow the attacker to launch a command injection attack and execute system commands.7.2CVE-2017-8198huawei technologies co., ltd.fusionsphere+1
EPSS score
1.05%
FusionSphere V100R006C00SPC102(NFV) has an SQL injection vulnerability. An authenticated, remote attacker could craft interface messages carrying malicious SQL statements and send them to a target device. Successful exploit could allow the attacker to launch an SQL injection attack and execute SQL commands.