CVE-2017-2718

8.8 highEPSS 0.9%

High (8.8) in huawei fusionsphere openstack. EPSS 0.9% chance of exploitation in the next 30 days.

FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one port. An attacker can exploit the vulnerabilities to gain root privileges by sending some messages with malicious commands.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWE: CWE-77
Published: 2017-11-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

huawei:fusionsphere_openstack

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170823-01-openstack-en
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170823-01-openstack-en

Check your stack JSON