VULNERABILITY INTELLIGENCE

CVE-2013-4877

CVSS score2.6 LOW
EPSS probability0.78%
CISA KEVNot currently listed
Published2013-07-18
Last modified2026-06-16
CVSS vectorAV:L/AC:H/Au:N/C:P/I:P/A:N

Description

The Verizon Wireless Network Extender SCS-26UC4 and SCS-2U01 does not use CAVE authentication, which makes it easier for remote attackers to obtain ESN and MIN values from arbitrary phones, and conduct cloning attacks, by sniffing the network for registration packets.

Weakness classification

  • CWE-287: Improper Authentication

Primary references