CVE-2013-4629
Last modified
CVE-2013-4629 is a vulnerability of currently unknown severity. The Huawei viewpoint VP9610 and VP9620 units for the Huawei Video Conference system do not update the Session ID upon successful establishment of a login session, which allows remote authenticated users to hijack sessions via an unspecified interception method.. EPSS estimates a 1.06% chance of exploitation in the next 30 days.
Description
The Huawei viewpoint VP9610 and VP9620 units for the Huawei Video Conference system do not update the Session ID upon successful establishment of a login session, which allows remote authenticated users to hijack sessions via an unspecified interception method.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Vp 9610 | <= v100r002c02b019sp05 |
| Huawei | Vp 9620 | <= v100r002c02b019sp05 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2013-4629?
How severe is CVE-2013-4629?
How do I fix CVE-2013-4629?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2013
- CVE-2013-4623The x509parse_crt function in x509.h in PolarSSL 1.1.x befor…
- CVE-2013-4624Multiple cross-site scripting (XSS) vulnerabilities in Jahia…
- CVE-2013-4625Cross-site scripting (XSS) vulnerability in files/installer.…
- CVE-2013-4626Cross-site scripting (XSS) vulnerability in the BackWPup plu…
- CVE-2013-4627Unspecified vulnerability in bitcoind and Bitcoin-Qt 0.8.x a…
- CVE-2013-4628The firewall module on the Huawei Quidway Service Process Un…
- CVE-2013-4630Stack-based buffer overflow on Huawei AR 150, 200, 1200, 220…
- CVE-2013-4631Huawei AR 150, 200, 1200, 2200, and 3200 routers, when SNMPv…
- CVE-2013-4632The Huawei Access Router (AR) before V200R002SPC003 allows r…
- CVE-2013-4633Huawei Seco Versatile Security Manager (VSM) before V200R002…
- CVE-2013-4634SQL injection vulnerability in the jQuery autocomplete for i…
- CVE-2013-4635Integer overflow in the SdnToJewish function in jewish.c in …
Are you affected by CVE-2013-4629?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST