CVE-2013-4876 — MEDIUM (6.2)

Vulnerability Description

The Verizon Wireless Network Extender SCS-2U01 has a hardcoded password for the root account, which makes it easier for physically proximate attackers to obtain administrative access by leveraging a login prompt.

CVSS Score

6.2

MEDIUM

AV:L/AC:H/Au:N/C:C/I:C/A:C

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE

Affected Products

Vendor	Product	Versions
Verizon	Wireless Network Extender	scs-2u01

Related Weaknesses (CWE)

CWE-255

References

http://www.kb.cert.org/vuls/id/458007US Government Resource
http://www.kb.cert.org/vuls/id/BLUU-997M5BUS Government Resource
http://www.kb.cert.org/vuls/id/458007US Government Resource
http://www.kb.cert.org/vuls/id/BLUU-997M5BUS Government Resource

FAQ

What is CVE-2013-4876?

CVE-2013-4876 is a vulnerability with a CVSS score of 6.2 (MEDIUM). The Verizon Wireless Network Extender SCS-2U01 has a hardcoded password for the root account, which makes it easier for physically proximate attackers to obtain administrative access by leveraging a l...

How severe is CVE-2013-4876?

CVE-2013-4876 has been rated MEDIUM with a CVSS base score of 6.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-4876?

Check the references section above for vendor advisories and patch information. Affected products include: Verizon Wireless Network Extender.