CVE-2013-4875 — MEDIUM (6.2)

Vulnerability Description

The Uboot bootloader on the Verizon Wireless Network Extender SCS-2U01 allows physically proximate attackers to bypass the intended boot process and obtain a login prompt by connecting a crafted HDMI cable and sending a SysReq interrupt.

CVSS Score

6.2

MEDIUM

AV:L/AC:H/Au:N/C:C/I:C/A:C

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE

Affected Products

Vendor	Product	Versions
Verizon	Wireless Network Extender	scs-2u01

Related Weaknesses (CWE)

CWE-287

References

http://www.kb.cert.org/vuls/id/458007US Government Resource
http://www.kb.cert.org/vuls/id/BLUU-997M5BUS Government Resource
http://www.securityfocus.com/bid/61169
http://www.kb.cert.org/vuls/id/458007US Government Resource
http://www.kb.cert.org/vuls/id/BLUU-997M5BUS Government Resource
http://www.securityfocus.com/bid/61169

FAQ

What is CVE-2013-4875?

CVE-2013-4875 is a vulnerability with a CVSS score of 6.2 (MEDIUM). The Uboot bootloader on the Verizon Wireless Network Extender SCS-2U01 allows physically proximate attackers to bypass the intended boot process and obtain a login prompt by connecting a crafted HDMI ...

How severe is CVE-2013-4875?

CVE-2013-4875 has been rated MEDIUM with a CVSS base score of 6.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-4875?

Check the references section above for vendor advisories and patch information. Affected products include: Verizon Wireless Network Extender.