PT-2013-5112 · Huawei · Huawei Seco Versatile Security Manager

Published 2013-06-20 · Updated 2013-06-21 · CVE-2013-4633

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Huawei Seco Versatile Security Manager (VSM) versions prior to V200R002C00SPC300

Description The issue allows remote authenticated users to gain privileges via a certain change to a group configuration setting.

Recommendations For versions prior to V200R002C00SPC300, update to V200R002C00SPC300 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2013-4633

Affected Products

Huawei Seco Versatile Security Manager

References · 2

• http://huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-258449.htm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-4633 · Security Note