What is the CVSS score of CVE-2013-3581?

CVE-2013-3581 has a CVSS 2.0 base score of 7.1 (High). CVSS vector: AV:N/AC:M/Au:N/C:C/I:N/A:N. EPSS exploitation probability: 0.4%.

Wixfmr 111 CVE-2013-3581

HIGH

Improper Authentication (CWE-287)

2013-07-02 cret@cert.org

Authentication Bypass Wixfmr 111

7.1

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

7.1 HIGH

AV:N/AC:M/Au:N/C:C/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:C/I:N/A:N

Attack Vector

Network

Attack Complexity

Confidentiality

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Jul 02, 2013 - 03:43 cve.org

HIGH 7.1

DescriptionCVE.org

ajax.cgi in the web interface on the Choice Wireless Green Packet WIXFMR-111 4G WiMax modem allows remote attackers to obtain sensitive information via an Ajax (1) wmxState or (2) netState request.

AnalysisAI

ajax.cgi in the web interface on the Choice Wireless Green Packet WIXFMR-111 4G WiMax modem allows remote attackers to obtain sensitive information via an Ajax (1) wmxState or (2) netState request. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Improper Authentication (CWE-287), which allows attackers to bypass authentication mechanisms to gain unauthorized access. ajax.cgi in the web interface on the Choice Wireless Green Packet WIXFMR-111 4G WiMax modem allows remote attackers to obtain sensitive information via an Ajax (1) wmxState or (2) netState request. Affected products include: Choice Wireless Wixfmr-111.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement multi-factor authentication, enforce strong password policies, use proven authentication frameworks.