Lucene search

RedhatCVE-2013-4218

HistoryAug 25, 2013 - 3:27 a.m.

CVE-2013-4218

2013-08-2503:27:32

CWE-310

redhat

web.nvd.nist.gov

cve-2013-4218

infrastack

wimax

intel wireless wimax connection 2400

rsa

sensitive information

nvd

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

Confidence

Low

EPSS

Percentile

5.1%

JSON

The InitMethodAndPassword function in InfraStack/OSAgnostic/WiMax/Agents/Supplicant/Source/SupplicantAgent.c in the Intel WiMAX Network Service through 1.5.2 for Intel Wireless WiMAX Connection 2400 devices uses the same RSA private key in supplicant_key.pem on all systems, which allows local users to obtain sensitive information via unspecified decryption operations.

Affected configurations

Nvd

Node

intelwimax_network_serviceRange≤1.5.2

intelwimax_network_serviceMatch1.5.0

VendorProductVersionCPE
intelwimax_network_service*cpe:2.3:a:intel:wimax_network_service:*:*:*:*:*:*:*:*
intelwimax_network_service1.5.0cpe:2.3:a:intel:wimax_network_service:1.5.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
intel	wimax_network_service	*	cpe:2.3:a:intel:wimax_network_service::::::::
intel	wimax_network_service	1.5.0	cpe:2.3:a:intel:wimax_network_service:1.5.0:::::::*

References

www.openwall.com/lists/oss-security/2013/08/08/17

bugzilla.redhat.com/show_bug.cgi?id=911126

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

Confidence

Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2013-4218