Lucene search

K
cveMitreCVE-2013-4876
HistoryJul 18, 2013 - 4:51 p.m.

CVE-2013-4876

2013-07-1816:51:40
CWE-255
mitre
web.nvd.nist.gov
26
verizon
wireless
network
extender
scs-2u01
hardcoded password
vulnerability
nvd
cve-2013-4876

CVSS2

6.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

AI Score

6.9

Confidence

Low

EPSS

0.001

Percentile

32.8%

The Verizon Wireless Network Extender SCS-2U01 has a hardcoded password for the root account, which makes it easier for physically proximate attackers to obtain administrative access by leveraging a login prompt.

Affected configurations

Nvd
Node
verizonwireless_network_extenderMatchscs-2u01
VendorProductVersionCPE
verizonwireless_network_extenderscs-2u01cpe:2.3:h:verizon:wireless_network_extender:scs-2u01:*:*:*:*:*:*:*

CVSS2

6.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

AI Score

6.9

Confidence

Low

EPSS

0.001

Percentile

32.8%

Related for CVE-2013-4876