Lucene search

CiscoCVE-2013-7136

HistoryDec 19, 2013 - 10:55 p.m.

CVE-2013-7136

2013-12-1922:55:04

CWE-310

cisco

web.nvd.nist.gov

upc ireland

cisco

epc 2425

router

wpa-psk

passphrases

brute-force

attack

nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0.052

Percentile

93.1%

JSON

The UPC Ireland Cisco EPC 2425 router (aka Horizon Box) does not have a sufficiently large number of possible WPA-PSK passphrases, which makes it easier for remote attackers to obtain access via a brute-force attack.

Affected configurations

Nvd

Node

upcireland_cisco_epc2425Match-

VendorProductVersionCPE
upcireland_cisco_epc2425-cpe:2.3:h:upc:ireland_cisco_epc2425:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
upc	ireland_cisco_epc2425	-	cpe:2.3:h:upc:ireland_cisco_epc2425:-:::::::*

References

www.exploit-db.com/exploits/30358/

www.planitcomputing.ie/upc-wifi-attack.pdf

exchange.xforce.ibmcloud.com/vulnerabilities/90133

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0.052

Percentile

93.1%

JSON

Related for CVE-2013-7136