CVE-2016-3675

High

Published: 11/04/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2016-3675 is an SQL injection vulnerability in Huawei Policy Center with software versions before V100R003C10SPC020. It allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to system databases.

Risk Assessment

This vulnerability may lead to unauthorized access and manipulation of data, posing a serious threat to the integrity and confidentiality of information within the organization.

Recommendation

It is recommended to update Huawei Policy Center software to version V100R003C10SPC020 or later to mitigate this vulnerability.

Other vulnerabilities in Huawei Policy Center

CVE-2016-2405High
Huawei Policy Center with software versions before V100R003C10SPC020 allows remote authenticated users to gain privileges and cause a denial of service (system crash) via a crafted URL.

Original NVD description (English source)

SQL injection vulnerability in Huawei Policy Center with software before V100R003C10SPC020 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to system databases.