CVE-2013-4874: Medium severity verizon 4g lte network extender vulnerability
Published Jul 18, 2013
·Updated
The Uboot bootloader on the Verizon Wireless Network Extender SCS-26UC4 allows physically proximate attackers to obtain root access by connecting a crafted HDMI cable and using a sys session to modify the ramboot environment variable.
Affected Software
1 affected component
Verizon Wireless Network Extender=scs-26uc4
Event History
Jul 18, 2013
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-4874?
CVE-2013-4874 is classified as a high severity vulnerability due to the potential for root access.
2
How do I fix CVE-2013-4874?
To fix CVE-2013-4874, ensure that physical access to the device is restricted and consider firmware updates if available.
3
Who is affected by CVE-2013-4874?
CVE-2013-4874 specifically affects the Verizon Wireless Network Extender SCS-26UC4.
4
What type of attack vector is utilized in CVE-2013-4874?
CVE-2013-4874 can be exploited by physically proximate attackers connecting a crafted HDMI cable.
5
Can CVE-2013-4874 lead to remote exploitation?
No, CVE-2013-4874 requires physical access to the device for exploitation.