Remote Session Management Flaw in Huawei E585 Device
CVE-2012-5968

Currently unrated

Key Information:

Vendor
Huawei
Status
E585
E585u-82
Vendor
CVE Published:
19 December 2012

Summary

The Huawei E585 device is susceptible to a remote session management vulnerability that fails to validate the status of admin sessions. This oversight allows attackers who gain access to the local area network (LAN) to exploit the vulnerability. By doing so, they can capture sensitive user information and session IDs, as well as modify vital data. This can lead to significant security breaches, compromising user privacy and device integrity.

References

http://www.huawei.com/en/security/psirt/security-bulletin...
x_refsource_CONFIRM
http://www.kb.cert.org/vuls/id/871148
third-party-advisoryx_refsource_CERT-VN

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.