RETIRED: Verizon Wireless Network Extender Multiple Local Privilege Escalation Vulnerabilities

Bugtraq ID:	61169
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Jul 15 2013 12:00AM
Updated:	Jul 23 2013 02:23AM
Credit:	iSEC Partners
Vulnerable:
Not Vulnerable:

RETIRED: Verizon Wireless Network Extender Multiple Local Privilege Escalation Vulnerabilities

Verizon Wireless Network Extender is prone to multiple local privilege-escalation vulnerabilities.

Successfully exploiting these issues may allow an attacker to execute arbitrary code with elevated privileges and completely compromise the device.

Verizon Wireless Network Extender models SCS-26UC4 and SCS-2U01 are affected.

This BID is being retired. The following individual records exist to better document the issues:

61395 Verizon Wireless Network Extender CVE-2013-4874 Local Privilege Escalation Vulnerability
61394 Verizon Wireless Network Extender CVE-2013-4875 Local Privilege Escalation Vulnerability
61393 Multiple Verizon Wireless Network Extender CVE-2013-4877 Multiple Security Bypass Vulnerabilities

RETIRED: Verizon Wireless Network Extender Multiple Local Privilege Escalation Vulnerabilities

The researcher who discovered the issue has provided steps for exploitation. Please see the references for more information.

RETIRED: Verizon Wireless Network Extender Multiple Local Privilege Escalation Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

RETIRED: Verizon Wireless Network Extender Multiple Local Privilege Escalation Vulnerabilities

References: