CVE-2017-8132
Last modified
CVE-2017-8132 is a vulnerability of currently unknown severity. The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit the vulnerabilities to gain root privileges by sending some messages with malicious commands.. EPSS estimates a 1.37% chance of exploitation in the next 30 days.
Description
The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit the vulnerabilities to gain root privileges by sending some messages with malicious commands.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Fusionsphere Openstack | v100r006c00 |
| Huawei | Fusionsphere Openstack | v100r006c10 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-8132?
How severe is CVE-2017-8132?
How do I fix CVE-2017-8132?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-8126The UMA product with software V200R001 has a privilege eleva…
- CVE-2017-8127The UMA product with software V200R001 has a cross-site scri…
- CVE-2017-8128The UMA product with software V200R001 and V300R001 has a pr…
- CVE-2017-8129The UMA product with software V200R001 and V300R001 has a pr…
- CVE-2017-8130The UMA product with software V200R001 and V300R001 has an i…
- CVE-2017-8131The FusionSphere OpenStack with software V100R006C00 and V10…
- CVE-2017-8133Huawei iManager NetEco with software V600R008C00 and V600R00…
- CVE-2017-8134The FusionSphere OpenStack with software V100R006C00 and V10…
- CVE-2017-8135The FusionSphere OpenStack with software V100R006C00 and V10…
- CVE-2017-8136HedEx Earlier than V200R006C00 versions has an arbitrary fil…
- CVE-2017-8137HedEx Earlier than V200R006C00 versions has a dynamic link l…
- CVE-2017-8138HedEx Earlier than V200R006C00 versions has a cross-site req…
Are you affected by CVE-2017-8132?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST