PT-2012-6211 · Huawei · Huawei E585

John Bird · Published 2012-12-19 · Updated 2013-01-29 · CVE-2012-5968

Positive Technologies (AI Summary)

CVSS v2.0

4.8

Medium

Base vector

AV:A/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Huawei E585 device (affected versions not specified)

Description The issue concerns the lack of validation for the status of admin sessions. This allows remote attackers to obtain sensitive user information and the session ID, and modify data, by leveraging access to the LAN network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2012-5968

Affected Products

Huawei E585

References · 3

• http://huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-198239.htm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-5968 · Security Note
• http://kb.cert.org/vuls/id/871148 · Note