Lucene search
HistoryJun 20, 2013 - 3:55 p.m.
CVE-2013-4629
8.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
6.4 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.3%
The Huawei viewpoint VP9610 and VP9620 units for the Huawei Video Conference system do not update the Session ID upon successful establishment of a login session, which allows remote authenticated users to hijack sessions via an unspecified interception method.
Affected configurations
Node
huaweivp_9610Range≤v100r002c02b019sp05
ORhuaweivp_9620Range≤v100r002c02b019sp05
Related
cve
cve
CVE-2013-4629
2022-10-03 16:14:57
cvelist
cvelist
CVE-2013-4629
2022-10-03 16:14:57
nessus
nessus
Huawei VP9610 / 9620 Fixed Session ID (HWNSIRT-2013-0318)
2014-08-22 00:00:00
prion
prion
Design/Logic Flaw
2013-06-20 15:55:00
8.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
6.4 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.3%
Related for NVD:CVE-2013-4629