Huawei Policy Center SQL Injection Vulnerability (CVE-2016-3675)

Huawei Policy Center SQL Injection Vulnerability (CVE-2016-3675)
Huawei Policy Center SQL Injection Vulnerability (CVE-2016-3675)

Release date:
Updated on:

Affected Systems:

Huawei Policy Center <V100R003C10SPC020

Description:

CVE (CAN) ID: CVE-2016-3675

The Huawei Policy Center can dynamically allocate network resources.

The Huawei Policy Center (earlier than V100R003C10SPC020) has the SQL injection vulnerability. Remote attackers can execute arbitrary SQL commands.

<* Source: Huawei
*>

Suggestion:

Vendor patch:

Huawei
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160325-01-policycenter-en

This article permanently updates the link address: