CVSS: 9.0EPSS: 0%CPEs: 6EXPL: 0CVE-2021-37102
https://notcve.org/view.php?id=CVE-2021-37102
23 Nov 2021 — There is a command injection vulnerability in CMA service module of FusionCompute product when processing the default certificate file. The software constructs part of a command using external special input from users, but the software does not sufficiently validate the user input. Successful exploit could allow the attacker to inject certain commands to the system. Affected product versions include: FusionCompute 6.0.0, 6.3.0, 6.3.1, 6.5.0, 6.5.1, 8.0.0. Se presenta una vulnerabilidad de inyección de coman... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210922-01-cmd-en • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2016-6827
https://notcve.org/view.php?id=CVE-2016-6827
26 Sep 2016 — Huawei FusionCompute before V100R005C10CP7002 stores cleartext AES keys in a file, which allows remote authenticated users to obtain sensitive information via unspecified vectors. Huawei FusionCompute en versiones anteriores a V100R005C10CP7002 almacena claves AES de texto plano en un archivo, lo que permite a usuarios remotos autenticados obtener información sensible a través de vectores no especificados. • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160815-01-fusioncompute-EN • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0CVE-2016-4057
https://notcve.org/view.php?id=CVE-2016-4057
30 Jun 2016 — Huawei FusionCompute before V100R005C10SPC700 allows remote authenticated users to cause a denial of service (resource consumption) via a large number of crafted packets. Huawei FusionCompute en versiones anteriores a V100R005C10SPC700 permite a usuarios remotos autenticados provocar una denegación de servicio (consumo de recurso) a través de un gran número de paquetes manipulados. • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160330-01-fusioncompute-en • CWE-399: Resource Management Errors •