Vulnerabilities > Huawei > Vcm5020 Firmware > High

DATE CVE VULNERABILITY TITLE RISK
2017-08-28 CVE-2015-8332 Improper Authentication vulnerability in Huawei Vcm5010 Firmware and Vcm5020 Firmware
Huawei Video Content Management (VCM) before V100R001C10SPC001 does not properly "authenticate online user identities and privileges," which allows remote authenticated users to gain privileges and perform a case operation as another user via a crafted message, aka "Horizontal Privilege Escalation Vulnerability."
network
low complexity
huawei CWE-287
8.8