VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 20, 2013· Updated Jun 16, 2026

CVE-2013-4629

CVE-2013-4629

Description

The Huawei viewpoint VP9610 and VP9620 units for the Huawei Video Conference system do not update the Session ID upon successful establishment of a login session, which allows remote authenticated users to hijack sessions via an unspecified interception method.

Affected products

4
  • Huawei/VP96102 versions
    cpe:2.3:h:huawei:vp_9610:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:h:huawei:vp_9610:*:*:*:*:*:*:*:*range: <=v100r002c02b019sp05
    • (no CPE)
  • Huawei/VP96202 versions
    cpe:2.3:h:huawei:vp_9620:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:h:huawei:vp_9620:*:*:*:*:*:*:*:*range: <=v100r002c02b019sp05
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.