Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit the vulnerabilities to gain root privileges by sending some messages with malicious commands.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Huawei FusionSphere OpenStack 命令注入漏洞
Vulnerability Description
Huawei FusionSphere OpenStack是中国华为（Huawei）公司的一套FusionSphere（云操作系统）在ICT场景中的云平台软件。 Huawei FusionSphere OpenStack V100R006C00版本和V100R006C10版本中存在命令注入漏洞，该漏洞源于TCP监听端没有充分的校验输入的参数。攻击者可通过发送带有恶意命令的消息利用该漏洞获取root权限。
CVSS Information
N/A
Vulnerability Type
N/A