What is the CVSS score of CVE-2013-4877?

CVE-2013-4877 has a CVSS 2.0 base score of 2.6 (Low). CVSS vector: AV:L/AC:H/Au:N/C:P/I:P/A:N. EPSS exploitation probability: 0.9%.

Wireless Network Extender CVE-2013-4877

LOW

Improper Authentication (CWE-287)

2013-07-18 cve@mitre.org

Authentication Bypass Wireless Network Extender

2.6

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

2.6 LOW

AV:L/AC:H/Au:N/C:P/I:P/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:H/Au:N/C:P/I:P/A:N

Attack Vector

Local

Attack Complexity

High

Confidentiality

Integrity

Availability

None

Lifecycle Timeline

CVE Published

Jul 18, 2013 - 16:51 cve.org

LOW 2.6

DescriptionCVE.org

The Verizon Wireless Network Extender SCS-26UC4 and SCS-2U01 does not use CAVE authentication, which makes it easier for remote attackers to obtain ESN and MIN values from arbitrary phones, and conduct cloning attacks, by sniffing the network for registration packets.

AnalysisAI

The Verizon Wireless Network Extender SCS-26UC4 and SCS-2U01 does not use CAVE authentication, which makes it easier for remote attackers to obtain ESN and MIN values from arbitrary phones, and. Rated low severity (CVSS 2.6). No vendor patch available.

Technical ContextAI

This vulnerability is classified as Improper Authentication (CWE-287), which allows attackers to bypass authentication mechanisms to gain unauthorized access. The Verizon Wireless Network Extender SCS-26UC4 and SCS-2U01 does not use CAVE authentication, which makes it easier for remote attackers to obtain ESN and MIN values from arbitrary phones, and conduct cloning attacks, by sniffing the network for registration packets. Affected products include: Verizon Wireless Network Extender.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement multi-factor authentication, enforce strong password policies, use proven authentication frameworks.