Improper input validation in Huawei Vp9660

CVE-2015-8227

The built-in web server in Huawei VP9660 multi-point control unit with software before V200R001C30SPC700 allows remote administrators to obtain sensitive information or cause a denial of service via a crafted message.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.007 (50.1th percentile) — read the EPSS interpretation.

Affected products

Huawei Vp9660
Huawei Vp_9660_firmware — versions v200r001c01, v200r001c02
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)