CVE-2015-8334

Severity: high (CVSS 8.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-08-29 · updated 2026-06-17
Weakness: CWE-89

Description

SQL injection vulnerability in the Operation and Maintenance Unit (OMU) in Huawei VCN500 before V100R002C00SPC201 allows remote authenticated users to execute arbitrary SQL commands via a crafted HTTP request.

Affected products

Huawei Vcn500 Firmware: v100r002c00spc200, v100r002c00spc200b010

References

http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-463072.htm
http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-463072.htm

Get alerted when CVE-2015-8334 or the next vulnerability affects your stack