Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, and S7800 switches uses predictable Session ID values, which makes it easier for remote attackers to hijack sessions via a brute-force attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Huawei AR路由器和多款交换机HTTP模块安全漏洞
Vulnerability Description
Huawei Access Router（AR）是中国华为（Huawei）公司研发的一款低端路由器产品。该产品提供移动和固定两类网络接入方式，适用于企业网络。 Huawei AR路由器和S2000，S3000，S3500，S3900，S5100，S5600，S7800交换机中(1)Branch Intelligent Management System (BIMS)和(2)web management组件中的HTTP模块中存在漏洞，该漏洞源于程序使用可预测的会话ID值。远程攻击者可通过暴力破解攻击利用该漏
CVSS Information
N/A
Vulnerability Type
N/A