Huawei Fusionsphere vulnerabilities

3 CVEs affecting Huawei Fusionsphere, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-8198, published 2017-11-22.

More from Huawei.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-8197, published 2017-11-22. High severity, CVSS 7.2. EPSS: 2% chance of exploitation in the next 30 days. FusionSphere V100R006C00SPC102(NFV) has a command injection vulnerability. An authenticated, remote attacker could craft packets with malicious strings and send them to a target device. Successful…
• CVE-2017-8198, published 2017-11-22. High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days. FusionSphere V100R006C00SPC102(NFV) has an SQL injection vulnerability. An authenticated, remote attacker could craft interface messages carrying malicious SQL statements and send them to a target…
• CVE-2017-8196, published 2017-11-22. Medium severity, CVSS 4.2. EPSS: 0.3% chance of exploitation in the next 30 days. FusionSphere V100R006C00SPC102(NFV) has an incorrect authorization vulnerability. An authenticated attacker could execute commands that he/she should have had no permission to perform, thereby…