Huawei Fusionsphere Openstack vulnerabilities

21 CVEs affecting Huawei Fusionsphere Openstack, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-9079, published 2020-08-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-8188, published 2017-11-22. High severity, CVSS 7.2. EPSS: 1.7% chance of exploitation in the next 30 days. FusionSphere OpenStack V100R006C00SPC102(NFV)has a command injection vulnerability. Due to lack of validation, an attacker with high privilege may inject malicious code into some module of the…
CVE-2017-8135, published 2017-11-22. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports. An unauthenticated…
CVE-2017-8134, published 2017-11-22. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports. An unauthenticated…
CVE-2017-8132, published 2017-11-22. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports. An unauthenticated…
CVE-2017-8131, published 2017-11-22. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports. An unauthenticated…
CVE-2017-8194, published 2017-11-22. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. The FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability. Due to improper authentication on one port, an authenticated, remote attacker may exploit the…
CVE-2017-8195, published 2017-11-22. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. The FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability. Due to improper authentication on one port, an authenticated, remote attacker may exploit the…
CVE-2018-7977, published 2018-11-27. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. There is an information leakage vulnerability on several Huawei products. Due to insufficient communication protection for specific services, a remote, unauthorized attacker can exploit this…
CVE-2017-2719, published 2017-11-22. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one port. An attacker can exploit the…
CVE-2017-2718, published 2017-11-22. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one port. An attacker can exploit the…

Latest

CVE-2020-9079, published 2020-08-11. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. FusionSphere OpenStack 8.0.0 have a protection mechanism failure vulnerability. The product incorrectly uses a protection mechanism. An attacker has to find a way to exploit the vulnerability to…
CVE-2020-9225, published 2020-06-18. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. FusionSphere OpenStack 6.5.1 have an improper permissions management vulnerability. The software does not correctly perform a privilege assignment when an actor attempts to perform an action.…
CVE-2017-15321, published 2017-12-22. Low severity, CVSS 3.7. EPSS: 0.6% chance of exploitation in the next 30 days. Huawei FusionSphere OpenStack V100R006C000SPC102 (NFV) has an information leak vulnerability due to the use of a low version transmission protocol by default. An attacker could intercept packets…
CVE-2017-8193, published 2017-11-22. High severity, CVSS 8.0. EPSS: 0.9% chance of exploitation in the next 30 days. The FusionSphere OpenStack V100R006C00SPC102(NFV) has a command injection vulnerability. Due to the insufficient input validation on one port, an authenticated, local attacker may exploit the…
CVE-2017-8192, published 2017-11-22. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. FusionSphere OpenStack V100R006C00 has an improper authorization vulnerability. Due to improper authorization, an attacker with low privilege may exploit this vulnerability to obtain the operation…
CVE-2017-8191, published 2017-11-22. Medium severity, CVSS 5.9. EPSS: 0.6% chance of exploitation in the next 30 days. FusionSphere OpenStack V100R006C00SPC102(NFV)has a week cryptographic algorithm vulnerability. Attackers may exploit the vulnerability to crack the cipher text and cause information leak on the…
CVE-2017-8190, published 2017-11-22. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. FusionSphere OpenStack V100R006C00SPC102(NFV)has an improper verification of cryptographic signature vulnerability. The software does not verify the cryptographic signature. An attacker with high…