CVE-2013-4628
Last modified
CVE-2013-4628 is a vulnerability of currently unknown severity. The firewall module on the Huawei Quidway Service Process Unit (SPU) board S7700, S9300, and S9700 on Huawei Campus Switch devices allows remote authenticated users to obtain sensitive information from the high-priority security zone by leveraging access to the low-priority security zone.. EPSS estimates a 0.62% chance of exploitation in the next 30 days.
Description
The firewall module on the Huawei Quidway Service Process Unit (SPU) board S7700, S9300, and S9700 on Huawei Campus Switch devices allows remote authenticated users to obtain sensitive information from the high-priority security zone by leveraging access to the low-priority security zone.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Quidway Service Process Unit Board S7700 | v200r001c00spc300 |
| Huawei | Quidway Service Process Unit Board S9300 | v200r001c00spc300 |
| Huawei | Quidway Service Process Unit Board S9700 | v200r001c00spc300 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2013-4628?
How severe is CVE-2013-4628?
How do I fix CVE-2013-4628?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2013
- CVE-2013-4622The 3G Mobile Hotspot feature on the HTC Droid Incredible ha…
- CVE-2013-4623The x509parse_crt function in x509.h in PolarSSL 1.1.x befor…
- CVE-2013-4624Multiple cross-site scripting (XSS) vulnerabilities in Jahia…
- CVE-2013-4625Cross-site scripting (XSS) vulnerability in files/installer.…
- CVE-2013-4626Cross-site scripting (XSS) vulnerability in the BackWPup plu…
- CVE-2013-4627Unspecified vulnerability in bitcoind and Bitcoin-Qt 0.8.x a…
- CVE-2013-4629The Huawei viewpoint VP9610 and VP9620 units for the Huawei …
- CVE-2013-4630Stack-based buffer overflow on Huawei AR 150, 200, 1200, 220…
- CVE-2013-4631Huawei AR 150, 200, 1200, 2200, and 3200 routers, when SNMPv…
- CVE-2013-4632The Huawei Access Router (AR) before V200R002SPC003 allows r…
- CVE-2013-4633Huawei Seco Versatile Security Manager (VSM) before V200R002…
- CVE-2013-4634SQL injection vulnerability in the jQuery autocomplete for i…
Are you affected by CVE-2013-4628?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST