VULNERABILITY INTELLIGENCE

CVE-2013-4874

CVSS score6.2 MEDIUM
EPSS probability0.68%
CISA KEVNot currently listed
Published2013-07-18
Last modified2026-06-16
CVSS vectorAV:L/AC:H/Au:N/C:C/I:C/A:C

Description

The Uboot bootloader on the Verizon Wireless Network Extender SCS-26UC4 allows physically proximate attackers to obtain root access by connecting a crafted HDMI cable and using a sys session to modify the ramboot environment variable.

Weakness classification

  • CWE-287: Improper Authentication

Primary references