Medium severity6.5NVD Advisory· Published Jan 11, 2016· Updated May 6, 2026

CVE-2015-8335

Description

Huawei VCN500 with software before V100R002C00SPC201 logs passwords in cleartext, which allows remote authenticated users to obtain sensitive information by triggering log generation and then reading the log.

Affected products

Huawei/Vcn5002 versions
cpe:2.3:a:huawei:vcn500:v100r002c00spc200:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:huawei:vcn500:v100r002c00spc200:*:*:*:*:*:*:*
- cpe:2.3:a:huawei:vcn500:v100r002c00spc200b010:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-463084.htmnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000