Researchers
Back
Doug Deperry
Researcher from
iSEC Partners
#16658
of 60,400
18.6
Total CVSS
Vulnerabilities
·
3
Medium
3
PT-2013-5251
2013-07-18
6.2
CVE-2013-4874
Verizon
Verizon Wireless Network Extender
The issue allows physically proximate attackers to obtain root access by connecting a crafted HDMI cable and using a sys session to modify the `ramboot` environment variable.
PT-2013-5252
2013-07-18
6.2
CVE-2013-4875
Verizon
Verizon Wireless Network Extender
The issue allows physically proximate attackers to bypass the intended boot process and obtain a login prompt by connecting a crafted HDMI cable and sending a SysReq interrupt.
PT-2013-5253
2013-07-18
6.2
CVE-2013-4876
Verizon
Verizon Wireless Network Extender Scs-2U01
The issue concerns a hardcoded password for the `root` account in the device, making it easier for attackers with physical access to obtain administrative access by leveraging a login prompt.