Lucene search

K
nvd[email protected]NVD:CVE-2013-2820
HistoryJan 15, 2014 - 4:08 p.m.

CVE-2013-2820

2014-01-1516:08:18
CWE-287
web.nvd.nist.gov

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.0%

The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows remote attackers to reprogram the firmware via a replay attack using UDP ports 17336 and 17388.

Affected configurations

NVD
Node
sierrawirelessraven_x_ev-do_firmwareMatch4221_4.0.11.003
OR
sierrawirelessraven_x_ev-do_firmwareMatch4228_4.0.11.003
AND
sierrawirelessairlink_mp_at\&tMatch-
OR
sierrawirelessairlink_mp_at\&t_wifiMatch-
OR
sierrawirelessairlink_mp_bellMatch-
OR
sierrawirelessairlink_mp_bell_wifiMatch-
OR
sierrawirelessairlink_mp_rowMatch-
OR
sierrawirelessairlink_mp_row_wifiMatch-
OR
sierrawirelessairlink_mp_sprintMatch-
OR
sierrawirelessairlink_mp_sprint_wifiMatch-
OR
sierrawirelessairlink_mp_telusMatch-
OR
sierrawirelessairlink_mp_telus_wifiMatch-
OR
sierrawirelessairlink_mp_verizonMatch-
OR
sierrawirelessairlink_mp_verizon_wifiMatch-
OR
sierrawirelesspinpoint_xMatch-
OR
sierrawirelesspinpoint_xtMatch-
OR
sierrawirelessraven_xMatch-
OR
sierrawirelessraven_x_ev-doMatch-
OR
sierrawirelessraven_xeMatch-
OR
sierrawirelessraven_xtMatch-

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.0%

Related for NVD:CVE-2013-2820