The Huawei viewpoint VP9610 and VP9620 units for the Huawei Video Conference system do not update the Session ID upon successful establishment of a login session, which allows remote authenticated users to hijack sessions via an unspecified interception method.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
huawei vp 9610 |
||
huawei vp 9620 |