Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2015-8331

The Operation and Maintenance Unit (OMU) in Huawei VCN500 with software before V100R002C00SPC200 does not properly invalidate the session ID when an "abnormal exit" occurs, which allows remote attackers to conduct replay attacks via the session ID.

Published

2016-01-11T15:59:04.543

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 7.4 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: NONE

Exploitability Score

8.6

Impact Score

4.9

Weaknesses

Type: Primary
CWE-20

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	huawei	vcn500	v100r002c00spc200b010	Yes
Hardware	huawei	vcn500	-	No

References

http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-463067.htm Vendor Advisory ([email protected])
http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-463067.htm Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)