Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2016-8803: Huawei FusionStorage allows attackers to gain root access
CVE-2016-8803 · published 9 years ago
Summary
The maintenance component of Huawei FusionStorage can be tricked into creating specially crafted documents that give an attacker full control over the underlying operating system. This means a malicious user could obtain the highest level of permission on the storage system. Apply the vendor’s security update or patch as soon as possible to block this behavior.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| huawei | fusionstorage |
v100r003c30u1 cpe:2.3:a:huawei:fusionstorage:v100r003c30u1:*:*:*:*:*:*:* |
Original advisory text
The maintenance module in Huawei FusionStorage V100R003C30U1 allows attackers to create documents according to special rules to obtain the OS root privilege of FusionStorage.
The maintenance module in Huawei FusionStorage V100R003C30U1 allows attackers to create documents according to special rules to obtain the OS root privilege of FusionStorage.
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161123-01-fusions... Vendor Advisory
- http://www.securityfocus.com/bid/94507 Third Party Advisory VDB Entry
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Type
CWE-264Permissions, Privileges, and Access Controls
Timeline
Published2 Apr 2017
Updated29 Oct 2026
First seen29 Sep 2026
Sources
CVE-2016-8803 · NVD
Track software like this
Free during beta