Vulnerability in Huawei Vp 9610
CVE-2013-4629
The Huawei viewpoint VP9610 and VP9620 units for the Huawei Video Conference system do not update the Session ID upon successful establishment of a login session, which allows remote authenticated users to hijack sessions via an unspecified interception method.
EPSS: 0.011 (61.2th percentile) — read the EPSS interpretation.
Affected products
- Huawei Vp_9610
- Huawei Vp_9620
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)