Sql injection

2017-08-2915:29:00

PRIOn knowledge base

www.prio-n.com

8.5 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

42.7%

JSON

SQL injection vulnerability in the Operation and Maintenance Unit (OMU) in Huawei VCN500 before V100R002C00SPC201 allows remote authenticated users to execute arbitrary SQL commands via a crafted HTTP request.

CPENameOperatorVersion
vcn500_firmwareeq100r2c0spc200-v
vcn500_firmwareeq100r2c0spc200b10-v

CPE	Name	Operator	Version
	vcn500_firmware	eq	100r2c0spc200-v
	vcn500_firmware	eq	100r2c0spc200b10-v

References

www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-463072.htm