Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one port. An attacker can exploit the vulnerabilities to gain root privileges by sending some messages with malicious commands.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Huawei FusionSphere OpenStack 命令注入漏洞
Vulnerability Description
Huawei FusionSphere OpenStack是中国华为（Huawei）公司的一套FusionSphere（云操作系统）在ICT场景中的云平台软件。 Huawei FusionSphere OpenStack V100R006C00版本和V100R006C10RC2版本中存在命令注入漏洞，该漏洞源于TCP监听端口没有充分的校验输入的参数。攻击者可通过发送带有恶意命令的消息利用漏洞获得系统的root权限。
CVSS Information
N/A
Vulnerability Type
N/A