Huawei VCN500 vulnerabilities

3 CVEs affecting Huawei VCN500, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-8335, published 2016-01-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-8331, published 2016-01-11. High severity, CVSS 7.4. EPSS: 0.8% chance of exploitation in the next 30 days. The Operation and Maintenance Unit (OMU) in Huawei VCN500 with software before V100R002C00SPC200 does not properly invalidate the session ID when an "abnormal exit" occurs, which allows remote…
CVE-2015-8333, published 2016-01-11. High severity, CVSS 7.1. EPSS: 0.8% chance of exploitation in the next 30 days. The Operation and Maintenance Unit (OMU) in Huawei VCN500 with software before V100R002C00SPC200 allows remote authenticated users to change the IP address of the media server via crafted packets.
CVE-2015-8335, published 2016-01-11. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. Huawei VCN500 with software before V100R002C00SPC201 logs passwords in cleartext, which allows remote authenticated users to obtain sensitive information by triggering log generation and then reading…