CVE-2012-5968

Currently unrated

Key Information:

Vendor
Huawei
Status
E585
E585u-82
Vendor
CVE Published:
19 December 2012

Summary

The Huawei E585 device does not validate the status of admin sessions, which allows remote attackers to obtain sensitive user information and the session ID, and modify data, by leveraging access to the LAN network.

References

http://www.huawei.com/en/security/psirt/security-bulletin...
x_refsource_CONFIRM
http://www.kb.cert.org/vuls/id/871148
third-party-advisoryx_refsource_CERT-VN

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.