What is the CVSS score of CVE-2015-8227?

CVE-2015-8227 has a CVSS 2.0 base score of 8.5 (High). CVSS vector: AV:N/AC:M/Au:S/C:C/I:C/A:C. EPSS exploitation probability: 0.2%.

Vp 9660 Firmware CVE-2015-8227

HIGH

Improper Input Validation (CWE-20)

2015-11-24 cve@mitre.org

Denial Of Service Huawei Vp 9660 Firmware

8.5

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

8.5 HIGH

AV:N/AC:M/Au:S/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:S/C:C/I:C/A:C

Attack Vector

Network

Attack Complexity

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Nov 24, 2015 - 20:59 cve.org

HIGH 8.5

DescriptionCVE.org

The built-in web server in Huawei VP9660 multi-point control unit with software before V200R001C30SPC700 allows remote administrators to obtain sensitive information or cause a denial of service via a crafted message.

AnalysisAI

Technical ContextAI

This vulnerability is classified under CWE-20. The built-in web server in Huawei VP9660 multi-point control unit with software before V200R001C30SPC700 allows remote administrators to obtain sensitive information or cause a denial of service via a crafted message. Affected products include: Huawei Vp 9660 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.