CVE-2015-8335 describes a vulnerability in Huawei VCN500 software prior to V100R002C00SPC201, where passwords are logged in cleartext. This allows remote authenticated users to retrieve sensitive information by triggering log generation and then accessing the logs. The vulnerability has a CVSS v3 score of 6.5 (Medium), indicating a low attack complexity and high confidentiality impact for an authenticated attacker. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
v100r002c00spc200CPE matchmatch criteria | cpe:2.3:a:huawei:vcn500:v100r002c00spc200:*:*:*:*:*:*:* | ||
v100r002c00spc200b010CPE matchmatch criteria | cpe:2.3:a:huawei:vcn500:v100r002c00spc200b010:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.