CVE-2013-4877: Low severity verizon 4g lte network extender vulnerability
The Verizon Wireless Network Extender SCS-26UC4 and SCS-2U01 does not use CAVE authentication, which makes it easier for remote attackers to obtain ESN and MIN values from arbitrary phones, and conduct cloning attacks, by sniffing the network for registration packets.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4877?
CVE-2013-4877 is considered a high-severity vulnerability due to the potential for cloning attacks.
How do I fix CVE-2013-4877?
To mitigate CVE-2013-4877, users should apply firmware updates provided by Verizon Wireless for the affected models.
What devices are affected by CVE-2013-4877?
CVE-2013-4877 affects the Verizon Wireless Network Extender models SCS-26UC4 and SCS-2U01.
What type of attacks can CVE-2013-4877 facilitate?
CVE-2013-4877 can facilitate cloning attacks by enabling attackers to obtain ESN and MIN values from phones.
How does CVE-2013-4877 expose devices to attacks?
CVE-2013-4877 exposes devices to attacks by not using CAVE authentication, allowing for the interception of registration packets.