CVE-2013-4874 — MEDIUM (6.2)

Vulnerability Description

The Uboot bootloader on the Verizon Wireless Network Extender SCS-26UC4 allows physically proximate attackers to obtain root access by connecting a crafted HDMI cable and using a sys session to modify the ramboot environment variable.

CVSS Score

6.2

MEDIUM

AV:L/AC:H/Au:N/C:C/I:C/A:C

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE

Affected Products

Vendor	Product	Versions
Verizon	Wireless Network Extender	scs-26uc4

Related Weaknesses (CWE)

CWE-287

References

http://www.kb.cert.org/vuls/id/458007US Government Resource
http://www.kb.cert.org/vuls/id/BLUU-997M5BUS Government Resource
http://www.securityfocus.com/bid/61169
http://www.kb.cert.org/vuls/id/458007US Government Resource
http://www.kb.cert.org/vuls/id/BLUU-997M5BUS Government Resource
http://www.securityfocus.com/bid/61169

FAQ

What is CVE-2013-4874?

CVE-2013-4874 is a vulnerability with a CVSS score of 6.2 (MEDIUM). The Uboot bootloader on the Verizon Wireless Network Extender SCS-26UC4 allows physically proximate attackers to obtain root access by connecting a crafted HDMI cable and using a sys session to modify...

How severe is CVE-2013-4874?

CVE-2013-4874 has been rated MEDIUM with a CVSS base score of 6.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-4874?

Check the references section above for vendor advisories and patch information. Affected products include: Verizon Wireless Network Extender.