NVD

Id
40385  
Name
CVE-2013-4877  
Description
The Verizon Wireless Network Extender SCS-26UC4 and SCS-2U01 does not use CAVE authentication, which makes it easier for remote attackers to obtain ESN and MIN values from arbitrary phones, and conduct cloning attacks, by sniffing the network for registration packets.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-07-18  
Modified Date
2013-08-22  
Seq
2013-4877  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
205053 40385 CVE-2013-4877 VU#458007  View
205054 40385 CVE-2013-4877 http://www.kb.cert.org/vuls/id/BLUU-997M5B  View
205055 40385 CVE-2013-4877 61169  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21886 JVNDB-2013-003461 Verizon Wireless Network Extender における ESN および MIN 値を取得される脆弱性 Verizon Wireless Network Extender は、CAVE 認証を使用しないため、任意の電話から ESN および MIN 値を取得され、クローニング攻撃を実行される脆弱性が存在します。 CVE-2013-4877 64819 CVE-2013-4877 40385 2.6 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003461.html 2013-07-15 2013-07-22 View