Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
There is a command injection vulnerability in CMA service module of FusionCompute product when processing the default certificate file. The software constructs part of a command using external special input from users, but the software does not sufficiently validate the user input. Successful exploit could allow the attacker to inject certain commands to the system. Affected product versions include: FusionCompute 6.0.0, 6.3.0, 6.3.1, 6.5.0, 6.5.1, 8.0.0.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Huawei FusionCompute 命令注入漏洞
Vulnerability Description
Huawei FusionCompute是中国华为（Huawei）公司的一款计算机虚拟化引擎。该产品提供虚拟资源管理器（VRM）和计算节点代理（CNA）等。 Huawei FusionCompute存在命令注入漏洞，该漏洞源于处理默认证书文件时CMA服务模块中的输入验证不正确。攻击者可利用该漏洞通过向应用程序传递精心构建的数据在目标系统上执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A