CVEvulnerability
CVE-2012-5968
4.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-12-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.8 MEDIUM — AV:A/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-20
Description
The Huawei E585 device does not validate the status of admin sessions, which allows remote attackers to obtain sensitive user information and the session ID, and modify data, by leveraging access to the LAN network.
Affected configurations
• huawei e585
• huawei e585u-82
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-198239.htm Vendor Advisory
- http://www.kb.cert.org/vuls/id/871148 US Government Resource
- http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-198239.htm Vendor Advisory
- http://www.kb.cert.org/vuls/id/871148 US Government Resource