Huawei VP9660 Information Leakage Vulnerability (CVE-2015-8227)

Huawei VP9660 Information Leakage Vulnerability (CVE-2015-8227)
Huawei VP9660 Information Leakage Vulnerability (CVE-2015-8227)

Release date:
Updated on:

Affected Systems:

Huawei VP9660 <V200R001C30SPC700

Description:

CVE (CAN) ID: CVE-2015-8227

Huawei VP9660 is a multi-point Controller of Huawei Video Conferencing System.

Huawei VP9660 (earlier than V200R001C30SPC700), the embedded Web server does not correctly verify the message structure. remote administrators can exploit this vulnerability to log on to the system to obtain sensitive information or cause a denial of service (DoS.

<* Source: Huawei
*>

Suggestion:

Vendor patch:

Huawei
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-461216.htm
Http://www.huawei.com/en/security/psirt/report-vulnerabilities/index.htm

This article permanently updates the link address: