CVE-2015-8334 describes a high-severity SQL injection vulnerability in the Operation and Maintenance Unit (OMU) of Huawei VCN500 devices prior to V100R002C00SPC201. This flaw allows remote, authenticated attackers to execute arbitrary SQL commands through specially crafted HTTP requests. With a CVSS v3 score of 8.8, successful exploitation could lead to high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
v100r002c00spc200CPE matchmatch criteria | cpe:2.3:o:huawei:vcn500_firmware:v100r002c00spc200:*:*:*:*:*:*:* | ||
v100r002c00spc200b010CPE matchmatch criteria | cpe:2.3:o:huawei:vcn500_firmware:v100r002c00spc200b010:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.