Description
The built-in web server in Huawei VP9660 multi-point control unit with software before V200R001C30SPC700 allows remote administrators to obtain sensitive information or cause a denial of service via a crafted message.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-461216.htm
Scores
EPSS
0.0016
EPSS Percentile
36.6%
Details
CWE
CWE-20
Status
published
Products (3)
huawei/vp_9660_firmware
v200r001c01
huawei/vp_9660_firmware
v200r001c02
huawei/vp_9660_firmware
< v200r001c30
Published
Nov 24, 2015
Tracked Since
Feb 18, 2026