VULNERABILITY INTELLIGENCE
CVE-2017-8196
CVSS score4.2 MEDIUM
EPSS probability0.26%
CISA KEVNot currently listed
Published2017-11-22
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Description
FusionSphere V100R006C00SPC102(NFV) has an incorrect authorization vulnerability. An authenticated attacker could execute commands that he/she should have had no permission to perform, thereby querying, modifying, and deleting certain service data and making the service unavailable.
Weakness classification
- CWE-863: Incorrect Authorization
Primary references
- psirt@huawei.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory