CVE-2013-4629

The Huawei viewpoint VP9610 and VP9620 units for the Huawei Video Conference system do not update the Session ID upon successful establishment of a login session, which allows remote authenticated users to hijack sessions via an unspecified interception method.

Score

CVSS 2.0 8.5 High

Status

Modified - cve@mitre.org

Published

2013-06-20

Last modified

2024-09-16

Weaknesses

CWE-255

Affected products

• Vp 9610 (Huawei)
• Vp 9620 (Huawei)

References

• http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-261327.htm