Authentication flaw

2013-07-1816:51:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.7%

JSON

The Verizon Wireless Network Extender SCS-26UC4 and SCS-2U01 does not use CAVE authentication, which makes it easier for remote attackers to obtain ESN and MIN values from arbitrary phones, and conduct cloning attacks, by sniffing the network for registration packets.

CPENameOperatorVersion
wireless_network_extendereqscs-26uc4
wireless_network_extendereqscs-2u1

CPE	Name	Operator	Version
	wireless_network_extender	eq	scs-26uc4
	wireless_network_extender	eq	scs-2u1

References

www.kb.cert.org/vuls/id/458007

www.kb.cert.org/vuls/id/BLUU-997M5B

www.securityfocus.com/bid/61169