Command Injection Vulnerability in Huawei FusionSphere V100R006C00SPC102

CVE-2017-8197

Summary

The FusionSphere V100R006C00SPC102 product from Huawei contains a security flaw that permits an authenticated, remote attacker to exploit command injection vulnerabilities. By crafting packets containing malicious strings and sending them to the target device, the attacker could execute arbitrary system commands. This weakness poses a significant risk as it enables unauthorized control over the affected system, emphasizing the need for immediate attention to mitigate potential exploitation.

References