What’s Vulnerable › Vulnerabilities

CVE-2013-4629

• Severity: high (CVSS 8.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-06-20 · updated 2026-06-16
• Weakness: CWE-255

Description

The Huawei viewpoint VP9610 and VP9620 units for the Huawei Video Conference system do not update the Session ID upon successful establishment of a login session, which allows remote authenticated users to hijack sessions via an unspecified interception method.

Affected products

• Huawei Vp 9610: through v100r002c02b019sp05
• Huawei Vp 9620: through v100r002c02b019sp05

References

• http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-261327.htm
• http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-261327.htm

Get alerted when CVE-2013-4629 or the next vulnerability affects your stack