What’s Vulnerable › Vulnerabilities

CVE-2012-5968

• Severity: medium (CVSS 4.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-12-19 · updated 2026-06-16
• Weakness: CWE-20

Description

The Huawei E585 device does not validate the status of admin sessions, which allows remote attackers to obtain sensitive user information and the session ID, and modify data, by leveraging access to the LAN network.

Affected products

• Huawei E585: all versions
• Huawei E585U-82: all versions

References

• http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-198239.htm
• http://www.kb.cert.org/vuls/id/871148
• http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-198239.htm
• http://www.kb.cert.org/vuls/id/871148

Get alerted when CVE-2012-5968 or the next vulnerability affects your stack