CVE-2017-8195

Severity: high (CVSS 8.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-11-22 · updated 2026-06-17
Weakness: CWE-287

Description

The FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability. Due to improper authentication on one port, an authenticated, remote attacker may exploit the vulnerability to execute more operations by send a crafted rest message.

Affected products

Huawei Technologies Co., Ltd. FusionSphere OpenStack: v100r006c00spc102(nfv)

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170830-01-OpenStack-en
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170830-01-OpenStack-en

Get alerted when CVE-2017-8195 or the next vulnerability affects your stack