What is the CVSS score of CVE-2013-4629?

CVE-2013-4629 has a CVSS 2.0 base score of 8.5 (High). CVSS vector: AV:N/AC:M/Au:S/C:C/I:C/A:C. EPSS exploitation probability: 0.2%.

Vp 9610 CVE-2013-4629

HIGH

Credentials Management Errors (CWE-255)

2013-06-20 cve@mitre.org

Huawei Authentication Bypass Vp 9610 Vp 9620

8.5

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

8.5 HIGH

AV:N/AC:M/Au:S/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:S/C:C/I:C/A:C

Attack Vector

Network

Attack Complexity

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Jun 20, 2013 - 15:55 cve.org

HIGH 8.5

DescriptionCVE.org

The Huawei viewpoint VP9610 and VP9620 units for the Huawei Video Conference system do not update the Session ID upon successful establishment of a login session, which allows remote authenticated users to hijack sessions via an unspecified interception method.

AnalysisAI

The Huawei viewpoint VP9610 and VP9620 units for the Huawei Video Conference system do not update the Session ID upon successful establishment of a login session, which allows remote authenticated. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-255. The Huawei viewpoint VP9610 and VP9620 units for the Huawei Video Conference system do not update the Session ID upon successful establishment of a login session, which allows remote authenticated users to hijack sessions via an unspecified interception method. Affected products include: Huawei Vp 9610, Huawei Vp 9620.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.