« Volver al listado

CVE-2013-4629

Estado: ModificadaAlta (8.5)—

Las unidades Huawei viewpoint VP9610 y VP9620 para el sistema Huawey Video Conference no actualiza el Session ID hasta el total establecimiento de un comienzo de sesión,lo que permite a usuarios remotos autenticados secuestrar sesiones a través de un método de intercepción no especificado.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Huawei — VP 9610Huawei — VP 9620

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-4629",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 8.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:C/I:C/A:C",
          "authentication": "SINGLE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-06-20T15:55:01.050",
  "references": [
    {
      "url": "http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-261327.htm",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-261327.htm",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-255"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Huawei viewpoint VP9610 and VP9620 units for the Huawei Video Conference system do not update the Session ID upon successful establishment of a login session, which allows remote authenticated users to hijack sessions via an unspecified interception method."
    },
    {
      "lang": "es",
      "value": "Las unidades Huawei viewpoint VP9610 y VP9620 para el sistema Huawey Video Conference no actualiza el Session ID hasta el total establecimiento de un comienzo de sesión,lo que permite a usuarios remotos autenticados secuestrar sesiones a través de un método de intercepción no especificado."
    }
  ],
  "lastModified": "2026-06-16T23:57:38.433",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:huawei:vp_9610:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D106FB80-C223-40F2-9B45-A01B9E0EB743",
              "versionEndIncluding": "v100r002c02b019sp05"
            },
            {
              "criteria": "cpe:2.3:h:huawei:vp_9620:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "17A4A831-AF59-4723-9C40-AC781746EF61",
              "versionEndIncluding": "v100r002c02b019sp05"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}