high8.5
CVE-2013-4629
The Huawei viewpoint VP9610 and VP9620 units for the Huawei Video Conference system do not update the Session ID upon successful establishment of a login sessi…
Impact
The Huawei viewpoint VP9610 and VP9620 units for the Huawei Video Conference system do not update the Session ID upon successful establishment of a login session, which allows remote authenticated users to hijack sessions via an unspecified interception method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Vp 9610 | through v100r002c02b019sp05 |
| Huawei | Vp 9620 | through v100r002c02b019sp05 |