Lucene search

IcscertCVE-2013-2820

HistoryJan 15, 2014 - 4:08 p.m.

CVE-2013-2820

2014-01-1516:08:18

CWE-287

icscert

web.nvd.nist.gov

sierra wireless

airlink raven x

ev-do

gateway

replay attack

udp ports

firmware

security vulnerability

cve-2013-2820

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

Confidence

Low

EPSS

0.005

Percentile

76.9%

JSON

The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows remote attackers to reprogram the firmware via a replay attack using UDP ports 17336 and 17388.

Affected configurations

Nvd

Node

sierrawirelessraven_x_ev-do_firmwareMatch4221_4.0.11.003

sierrawirelessraven_x_ev-do_firmwareMatch4228_4.0.11.003

AND

sierrawirelessairlink_mp_at\&tMatch-

sierrawirelessairlink_mp_at\&t_wifiMatch-

sierrawirelessairlink_mp_bellMatch-

sierrawirelessairlink_mp_bell_wifiMatch-

sierrawirelessairlink_mp_rowMatch-

sierrawirelessairlink_mp_row_wifiMatch-

sierrawirelessairlink_mp_sprintMatch-

sierrawirelessairlink_mp_sprint_wifiMatch-

sierrawirelessairlink_mp_telusMatch-

sierrawirelessairlink_mp_telus_wifiMatch-

sierrawirelessairlink_mp_verizonMatch-

sierrawirelessairlink_mp_verizon_wifiMatch-

sierrawirelesspinpoint_xMatch-

sierrawirelesspinpoint_xtMatch-

sierrawirelessraven_xMatch-

sierrawirelessraven_x_ev-doMatch-

sierrawirelessraven_xeMatch-

sierrawirelessraven_xtMatch-

VendorProductVersionCPE
sierrawirelessraven_x_ev-do_firmware4221_4.0.11.003cpe:2.3:o:sierrawireless:raven_x_ev-do_firmware:4221_4.0.11.003:*:*:*:*:*:*:*
sierrawirelessraven_x_ev-do_firmware4228_4.0.11.003cpe:2.3:o:sierrawireless:raven_x_ev-do_firmware:4228_4.0.11.003:*:*:*:*:*:*:*
sierrawirelessairlink_mp_at\&t-cpe:2.3:h:sierrawireless:airlink_mp_at\&t:-:*:*:*:*:*:*:*
sierrawirelessairlink_mp_at\&t_wifi-cpe:2.3:h:sierrawireless:airlink_mp_at\&t_wifi:-:*:*:*:*:*:*:*
sierrawirelessairlink_mp_bell-cpe:2.3:h:sierrawireless:airlink_mp_bell:-:*:*:*:*:*:*:*
sierrawirelessairlink_mp_bell_wifi-cpe:2.3:h:sierrawireless:airlink_mp_bell_wifi:-:*:*:*:*:*:*:*
sierrawirelessairlink_mp_row-cpe:2.3:h:sierrawireless:airlink_mp_row:-:*:*:*:*:*:*:*
sierrawirelessairlink_mp_row_wifi-cpe:2.3:h:sierrawireless:airlink_mp_row_wifi:-:*:*:*:*:*:*:*
sierrawirelessairlink_mp_sprint-cpe:2.3:h:sierrawireless:airlink_mp_sprint:-:*:*:*:*:*:*:*
sierrawirelessairlink_mp_sprint_wifi-cpe:2.3:h:sierrawireless:airlink_mp_sprint_wifi:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sierrawireless	raven_x_ev-do_firmware	4221_4.0.11.003	cpe:2.3:o:sierrawireless:raven_x_ev-do_firmware:4221_4.0.11.003:::::::*
sierrawireless	raven_x_ev-do_firmware	4228_4.0.11.003	cpe:2.3:o:sierrawireless:raven_x_ev-do_firmware:4228_4.0.11.003:::::::*
sierrawireless	airlink_mp_at\&t	-	cpe:2.3:h:sierrawireless:airlink_mp_at\&t:-:::::::*
sierrawireless	airlink_mp_at\&t_wifi	-	cpe:2.3:h:sierrawireless:airlink_mp_at\&t_wifi:-:::::::*
sierrawireless	airlink_mp_bell	-	cpe:2.3:h:sierrawireless:airlink_mp_bell:-:::::::*
sierrawireless	airlink_mp_bell_wifi	-	cpe:2.3:h:sierrawireless:airlink_mp_bell_wifi:-:::::::*
sierrawireless	airlink_mp_row	-	cpe:2.3:h:sierrawireless:airlink_mp_row:-:::::::*
sierrawireless	airlink_mp_row_wifi	-	cpe:2.3:h:sierrawireless:airlink_mp_row_wifi:-:::::::*
sierrawireless	airlink_mp_sprint	-	cpe:2.3:h:sierrawireless:airlink_mp_sprint:-:::::::*
sierrawireless	airlink_mp_sprint_wifi	-	cpe:2.3:h:sierrawireless:airlink_mp_sprint_wifi:-:::::::*

Rows per page:

1-10 of 201

References

ics-cert.us-cert.gov/advisories/ICSA-14-007-01A

www.sierrawireless.com/resources/support/airlink/docs/raven%20security%20vulnerability%202014-01-10.pdf

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

Confidence

Low

EPSS

0.005

Percentile

76.9%

JSON

Related for CVE-2013-2820