CVE-2013-4629

CVE-2013-4629 concerns Huawei VP9610/VP9620 video-conference hardware where the login session ID is not updated after authentication, enabling session hijacking by a remote, authenticated attacker. Reported impacts align with CVSS metrics: high impact on confidentiality, integrity, and availabili...

PT-2013-5108

Name of the Vulnerable Software and Affected Versions Huawei Video Conference system viewpoint VP9610 and VP9620 units affected versions not specified Description The issue allows remote authenticated users to hijack sessions due to the Session ID not being updated upon successful establishment o...

CVE-2013-4629: Undefined Security Weakness

The Huawei viewpoint VP9610 and VP9620 units for the Huawei Video Conference system do not update the Session ID upon successful establishment of a login session, which allows remote authenticated users to hijack sessions via an unspecified interception method...

Security Advisory-Vulnerability of Session ID not Updating in VP9610/9620

VP viewpoint 9610/VP9620 is the multi-point control unit of Huawei Video Conference system. By testing, there is a vulnerability of “Session ID not updating” in VP9610/9620. Vulnerability ID: HWNSIRT-2013-0318 Currently, official fixs are available...