What’s Vulnerable › Vulnerabilities

CVE-2013-4877

• Severity: low (CVSS 2.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-07-18 · updated 2026-06-16
• Weakness: CWE-287

Description

The Verizon Wireless Network Extender SCS-26UC4 and SCS-2U01 does not use CAVE authentication, which makes it easier for remote attackers to obtain ESN and MIN values from arbitrary phones, and conduct cloning attacks, by sniffing the network for registration packets.

Affected products

• Verizon Wireless Network Extender: scs-2u01, scs-26uc4

References

• http://www.kb.cert.org/vuls/id/458007
• http://www.kb.cert.org/vuls/id/BLUU-997M5B
• http://www.securityfocus.com/bid/61169
• http://www.kb.cert.org/vuls/id/458007
• http://www.kb.cert.org/vuls/id/BLUU-997M5B
• http://www.securityfocus.com/bid/61169

Get alerted when CVE-2013-4877 or the next vulnerability affects your stack