CVE-2015-8334
HighSummary
SQL injection vulnerability in the Operation and Maintenance Unit (OMU) in Huawei VCN500 before V100R002C00SPC201 allows remote authenticated users to execute arbitrary SQL commands via a crafted HTTP request.
Risk Assessment
This vulnerability may lead to unauthorized access to data and potential system takeover by malicious users.
Recommendation
It is recommended to update the software to the latest version to eliminate this vulnerability and implement additional security measures such as input filtering.
Other vulnerabilities in Huawei VCN500
See all- CVE-2015-8333High
The Operation and Maintenance Unit (OMU) in Huawei VCN500 with software before V100R002C00SPC200 allows remote authenticated users to change the IP address of the media server via crafted packets.
- CVE-2015-8331High
The Operation and Maintenance Unit (OMU) in Huawei VCN500 with software before V100R002C00SPC200 does not properly invalidate the session ID when an 'abnormal exit' occurs, allowing remote attackers to conduct replay attacks via the session ID.
Original NVD description (English source)
SQL injection vulnerability in the Operation and Maintenance Unit (OMU) in Huawei VCN500 before V100R002C00SPC201 allows remote authenticated users to execute arbitrary SQL commands via a crafted HTTP request.