CWE Code: 77
Vulnerability Type: privilege_escalation
CVSS Score: 7.7
CWE Name:  Improper Neutralization of Special Elements used in a Command ('Command Injection')
Summary: the fusionsphere openstack v100r006c00spc102(nfv) has a command injection vulnerability. due to the insufficient input validation on one port, an authenticated, local attacker may exploit the vulnerability to gain root privileges by sending message with malicious commands.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: ADJACENT_NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2017-11-22
Last Modified Date: 2017-12-08