Lucene search

MitreCVE-2013-4629

HistoryJun 20, 2013 - 3:55 p.m.

CVE-2013-4629

2013-06-2015:55:01

CWE-255

mitre

web.nvd.nist.gov

cve-2013-4629

huawei

viewpoint

vp9610

vp9620

video conference

session hijacking

interception

nvd

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

AI Score

6.5

Confidence

Low

EPSS

0.002

Percentile

64.8%

JSON

The Huawei viewpoint VP9610 and VP9620 units for the Huawei Video Conference system do not update the Session ID upon successful establishment of a login session, which allows remote authenticated users to hijack sessions via an unspecified interception method.

Affected configurations

Nvd

Node

huaweivp_9610Range≤v100r002c02b019sp05

huaweivp_9620Range≤v100r002c02b019sp05

VendorProductVersionCPE
huaweivp_9610*cpe:2.3:h:huawei:vp_9610:*:*:*:*:*:*:*:*
huaweivp_9620*cpe:2.3:h:huawei:vp_9620:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
huawei	vp_9610	*	cpe:2.3:h:huawei:vp_9610::::::::
huawei	vp_9620	*	cpe:2.3:h:huawei:vp_9620::::::::

References

www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-261327.htm

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

AI Score

6.5

Confidence

Low

EPSS

0.002

Percentile

64.8%

JSON

Related for CVE-2013-4629