Lucene search

MitreCVE-2013-4874

HistoryJul 18, 2013 - 4:51 p.m.

CVE-2013-4874

2013-07-1816:51:40

CWE-287

mitre

web.nvd.nist.gov

uboot

bootloader

verizon wireless

network extender

scs-26uc4

root access

hdmi

nvd

cve-2013-4874

CVSS2

6.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

47.6%

JSON

The Uboot bootloader on the Verizon Wireless Network Extender SCS-26UC4 allows physically proximate attackers to obtain root access by connecting a crafted HDMI cable and using a sys session to modify the ramboot environment variable.

Affected configurations

Nvd

Node

verizonwireless_network_extenderMatchscs-26uc4

VendorProductVersionCPE
verizonwireless_network_extenderscs-26uc4cpe:2.3:h:verizon:wireless_network_extender:scs-26uc4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
verizon	wireless_network_extender	scs-26uc4	cpe:2.3:h:verizon:wireless_network_extender:scs-26uc4:::::::*

References

www.kb.cert.org/vuls/id/458007

www.kb.cert.org/vuls/id/BLUU-997M5B

www.securityfocus.com/bid/61169

CVSS2

6.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

47.6%

JSON

Related for CVE-2013-4874