PT-2016-3890 · Huawei · Huawei Vcn500

Published 2016-01-11 · Updated 2016-01-12 · CVE-2015-8333

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Huawei VCN500 versions prior to V100R002C00SPC200

Description The issue allows remote authenticated users to change the IP address of the media server via crafted packets.

Recommendations For versions prior to V100R002C00SPC200, update to V100R002C00SPC200 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2015-8333

Affected Products

Huawei Vcn500

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2015-8333 · Security Note
• http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-463070.htm · Vendor Advisory