Lucene search

K
cve[email protected]CVE-2013-4874
HistoryJul 18, 2013 - 4:51 p.m.

CVE-2013-4874

2013-07-1816:51:40
CWE-287
web.nvd.nist.gov
18
uboot
bootloader
verizon wireless
network extender
scs-26uc4
root access
hdmi
nvd
cve-2013-4874

6.2 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.7%

The Uboot bootloader on the Verizon Wireless Network Extender SCS-26UC4 allows physically proximate attackers to obtain root access by connecting a crafted HDMI cable and using a sys session to modify the ramboot environment variable.

Affected configurations

NVD
Node
verizonwireless_network_extenderMatchscs-26uc4

6.2 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.7%

Related for CVE-2013-4874