VULNERABILITY INTELLIGENCE
CVE-2017-8190
CVSS score6.7 MEDIUM
EPSS probability0.19%
CISA KEVNot currently listed
Published2017-11-22
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
FusionSphere OpenStack V100R006C00SPC102(NFV)has an improper verification of cryptographic signature vulnerability. The software does not verify the cryptographic signature. An attacker with high privilege may exploit this vulnerability to inject malicious software.
Weakness classification
- CWE-347: Improper Verification of Cryptographic Signature
Primary references
- psirt@huawei.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory