What’s Vulnerable › Vulnerabilities

CVE-2015-8335

• Severity: medium (CVSS 6.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-01-11 · updated 2026-06-17
• Weakness: CWE-200

Description

Huawei VCN500 with software before V100R002C00SPC201 logs passwords in cleartext, which allows remote authenticated users to obtain sensitive information by triggering log generation and then reading the log.

Affected products

• Huawei Vcn500: v100r002c00spc200, v100r002c00spc200b010

References

• http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-463084.htm
• http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-463084.htm

Get alerted when CVE-2015-8335 or the next vulnerability affects your stack