EUVD-2013-4719

Malware in sbrugna...

EUVD-2013-4720

Malware in sbrugna...

CVE-2013-4876

The Verizon Wireless Network Extender SCS-2U01 has a hardcoded password for the root account, which makes it easier for physically proximate attackers to obtain administrative access by leveraging a login prompt...

Design/Logic Flaw

The Uboot bootloader on the Verizon Wireless Network Extender SCS-2U01 allows physically proximate attackers to bypass the intended boot process and obtain a login prompt by connecting a crafted HDMI cable and sending a SysReq interrupt...

Design/Logic Flaw

The Uboot bootloader on the Verizon Wireless Network Extender SCS-26UC4 allows physically proximate attackers to obtain root access by connecting a crafted HDMI cable and using a sys session to modify the ramboot environment variable...

CVE-2013-4875

The Uboot bootloader on the Verizon Wireless Network Extender SCS-2U01 allows physically proximate attackers to bypass the intended boot process and obtain a login prompt by connecting a crafted HDMI cable and sending a SysReq interrupt...

PT-2013-5252

Name of the Vulnerable Software and Affected Versions Verizon Wireless Network Extender SCS-2U01 affected versions not specified Description The issue allows physically proximate attackers to bypass the intended boot process and obtain a login prompt by connecting a crafted HDMI cable and sending...

CVE-2013-4877: Improper Authentication

The Verizon Wireless Network Extender SCS-26UC4 and SCS-2U01 does not use CAVE authentication, which makes it easier for remote attackers to obtain ESN and MIN values from arbitrary phones, and conduct cloning attacks, by sniffing the network for registration packets...

PT-2013-5251

Name of the Vulnerable Software and Affected Versions Verizon Wireless Network Extender SCS-26UC4 affected versions not specified Description The issue allows physically proximate attackers to obtain root access by connecting a crafted HDMI cable and using a sys session to modify the ramboot...

PT-2013-5254

Name of the Vulnerable Software and Affected Versions Verizon Wireless Network Extender versions SCS-26UC4 and SCS-2U01 Description The issue allows remote attackers to obtain ESN and MIN values from arbitrary phones by sniffing the network for registration packets, making it easier to conduct...

PT-2013-5253

Name of the Vulnerable Software and Affected Versions Verizon Wireless Network Extender SCS-2U01 Description The issue concerns a hardcoded password for the root account in the device, making it easier for attackers with physical access to obtain administrative access by leveraging a login prompt...

CVE-2013-4875: Improper Authentication

The Uboot bootloader on the Verizon Wireless Network Extender SCS-2U01 allows physically proximate attackers to bypass the intended boot process and obtain a login prompt by connecting a crafted HDMI cable and sending a SysReq interrupt...

CVE-2013-4876: Undefined Security Weakness

The Verizon Wireless Network Extender SCS-2U01 has a hardcoded password for the root account, which makes it easier for physically proximate attackers to obtain administrative access by leveraging a login prompt...

CVE-2013-4874: Improper Authentication

The Uboot bootloader on the Verizon Wireless Network Extender SCS-26UC4 allows physically proximate attackers to obtain root access by connecting a crafted HDMI cable and using a sys session to modify the ramboot environment variable...