CVE-2015-8331

N/A

Description

The Operation and Maintenance Unit (OMU) in Huawei VCN500 with software before V100R002C00SPC200 does not properly invalidate the session ID when an "abnormal exit" occurs, which allows remote attackers to conduct replay attacks via the session ID.

CVE Details

CVSS v3.1 ScoreN/A

Published1/11/2016

Last Modified4/12/2025

Sourcenvd

Honeypot Sightings0

Affected Products

huawei:vcn500

Weaknesses (CWE)

CWE-20

References

http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-463067.htm(cve@mitre.org)

http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-463067.htm(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.