What is the CVSS score of CVE-2017-8196?

CVE-2017-8196 has a CVSS 3.0 base score of 4.2 (Medium). CVSS vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L. EPSS exploitation probability: 0.0%.

Fusionsphere CVE-2017-8196

MEDIUM

Incorrect Authorization (CWE-863)

2017-11-22 psirt@huawei.com

Authentication Bypass Fusionsphere

4.2

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

4.2 MEDIUM

AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

Lifecycle Timeline

CVE Published

Nov 22, 2017 - 19:29 cve.org

MEDIUM 4.2

DescriptionCVE.org

FusionSphere V100R006C00SPC102(NFV) has an incorrect authorization vulnerability. An authenticated attacker could execute commands that he/she should have had no permission to perform, thereby querying, modifying, and deleting certain service data and making the service unavailable.

AnalysisAI

FusionSphere V100R006C00SPC102(NFV) has an incorrect authorization vulnerability. Rated medium severity (CVSS 4.2), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Incorrect Authorization (CWE-863), which allows attackers to bypass authorization checks to access restricted resources. FusionSphere V100R006C00SPC102(NFV) has an incorrect authorization vulnerability. An authenticated attacker could execute commands that he/she should have had no permission to perform, thereby querying, modifying, and deleting certain service data and making the service unavailable. Affected products include: Huawei Fusionsphere.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Review and test authorization logic, implement consistent access control checks, use centralized authorization framework.