CVEvulnerability

CVE-2015-8331

7.4 HIGH Published 2016-01-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-01-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.4 HIGH — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 2.0 ([email protected])
5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
Weaknesses
CWE-20

Description

The Operation and Maintenance Unit (OMU) in Huawei VCN500 with software before V100R002C00SPC200 does not properly invalidate the session ID when an "abnormal exit" occurs, which allows remote attackers to conduct replay attacks via the session ID.

Affected configurations

• huawei vcn500 v100r002c00spc200b010

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References