CVE-2017-8198

FusionSphere V100R006C00SPC102(NFV) has an SQL injection vulnerability. An authenticated, remote attacker could craft interface messages carrying malicious SQL statements and send them to a target device. Successful exploit could allow the attacker to launch an SQL injection attack and execute SQL commands.

• CWE-89

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170913-01-fusionsphere-enVendor Advisory
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170913-01-fusionsphere-enVendor Advisory

Published

Nov 22, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-8192FusionSphere OpenStack V100R006C00 has an improper authoriza…
• CVE-2017-8193The FusionSphere OpenStack V100R006C00SPC102(NFV) has a comm…
• CVE-2017-8194The FusionSphere OpenStack V100R006C00SPC102(NFV) has an imp…
• CVE-2017-8195The FusionSphere OpenStack V100R006C00SPC102(NFV) has an imp…
• CVE-2017-8196FusionSphere V100R006C00SPC102(NFV) has an incorrect authori…
• CVE-2017-8197FusionSphere V100R006C00SPC102(NFV) has a command injection …
• CVE-2017-8199MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R00…
• CVE-2017-8200MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R00…
• CVE-2017-8201MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R00…
• CVE-2017-8202The CameraISP driver of some Huawei smart phones with softwa…
• CVE-2017-8203The Bastet Driver of Nova 2 Plus,Nova 2 Huawei smart phones …
• CVE-2017-8204The Bastet driver of Honor 9 Huawei smart phones with softwa…