CVE-2015-8227

Published: Nov 24, 2015Modified: May 6, 2026

8.5

Vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

Exploitability: 6.8 / Impact: 10.0

Source: NVD

Description

The built-in web server in Huawei VP9660 multi-point control unit with software before V200R001C30SPC700 allows remote administrators to obtain sensitive information or cause a denial of service via a crafted message.

Affected (3)

Products: Huawei: Vp 9660 Firmware

Huawei

1 product

Vp 9660 Firmware

Configuration A

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Vp 9660 Firmware	Up to v200r001c30
Huawei Vp 9660 Firmware	Version v200r001c01
Huawei Vp 9660 Firmware	Version v200r001c02

Running on/with	Platform Versions
Huawei Vp9660	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-461216.htm

Source: cve@mitre.org

Vendor Advisory

http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-461216.htm

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.