Vulnerabilities > Huawei > Vcn500 > High

DATE CVE VULNERABILITY TITLE RISK
2016-01-11 CVE-2015-8333 Permissions, Privileges, and Access Controls vulnerability in Huawei Vcn500 V100R002C00Spc200B010
The Operation and Maintenance Unit (OMU) in Huawei VCN500 with software before V100R002C00SPC200 allows remote authenticated users to change the IP address of the media server via crafted packets.
network
low complexity
huawei CWE-264
7.1
2016-01-11 CVE-2015-8331 Improper Input Validation vulnerability in Huawei Vcn500 V100R002C00Spc200B010
The Operation and Maintenance Unit (OMU) in Huawei VCN500 with software before V100R002C00SPC200 does not properly invalidate the session ID when an "abnormal exit" occurs, which allows remote attackers to conduct replay attacks via the session ID.
network
high complexity
huawei CWE-20
7.4