CVE-2015-8331
HighSummary
The Operation and Maintenance Unit (OMU) in Huawei VCN500 with software before V100R002C00SPC200 does not properly invalidate the session ID when an 'abnormal exit' occurs, allowing remote attackers to conduct replay attacks via the session ID.
Risk Assessment
The risk to the organization is the potential for replay attacks, which could lead to unauthorized access to the system.
Recommendation
It is recommended to update the software to version V100R002C00SPC200 or later to ensure proper invalidation of the session ID.
Other vulnerabilities in Huawei VCN500
See all- CVE-2015-8334High
SQL injection vulnerability in the Operation and Maintenance Unit (OMU) in Huawei VCN500 before V100R002C00SPC201 allows remote authenticated users to execute arbitrary SQL commands via a crafted HTTP request.
- CVE-2015-8333High
The Operation and Maintenance Unit (OMU) in Huawei VCN500 with software before V100R002C00SPC200 allows remote authenticated users to change the IP address of the media server via crafted packets.
Original NVD description (English source)
The Operation and Maintenance Unit (OMU) in Huawei VCN500 with software before V100R002C00SPC200 does not properly invalidate the session ID when an "abnormal exit" occurs, which allows remote attackers to conduct replay attacks via the session ID.