Command Injection Vulnerability in FusionSphere OpenStack by Huawei

CVE-2017-8132

Summary

The FusionSphere OpenStack platform from Huawei is susceptible to a command injection vulnerability due to inadequate input validation on four TCP listening ports. An unauthenticated attacker could exploit this weak security measure, sending specially crafted messages containing malicious commands, thereby potentially gaining root access to the system. This vulnerability underscores the necessity for robust input validation practices to prevent unauthorized access.

References