Huawei VCN500 vulnerabilities
3 known CVE vulnerabilities in Huawei VCN500, translated and rated.
- CVE-2015-8334High
SQL injection vulnerability in the Operation and Maintenance Unit (OMU) in Huawei VCN500 before V100R002C00SPC201 allows remote authenticated users to execute arbitrary SQL commands via a crafted HTTP request.
- CVE-2015-8333High
The Operation and Maintenance Unit (OMU) in Huawei VCN500 with software before V100R002C00SPC200 allows remote authenticated users to change the IP address of the media server via crafted packets.
- CVE-2015-8331High
The Operation and Maintenance Unit (OMU) in Huawei VCN500 with software before V100R002C00SPC200 does not properly invalidate the session ID when an 'abnormal exit' occurs, allowing remote attackers to conduct replay attacks via the session ID.

