Vulnerability Details : CVE-2008-1262
The administration panel on the Airspan WiMax ProST 4.1 antenna with 6.5.38.0 software does not verify authentication credentials, which allows remote attackers to (1) upload malformed firmware or (2) bind the antenna to a different WiMAX base station via unspecified requests to forms under process_adv/.
Vulnerability category: BypassGain privilege
Exploit prediction scoring system (EPSS) score for CVE-2008-1262
Probability of exploitation activity in the next 30 days: 10.73%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 94 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2008-1262
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Source |
---|---|---|---|---|---|
10.0
|
HIGH | AV:N/AC:L/Au:N/C:C/I:C/A:C |
10.0
|
10.0
|
[email protected] |
CWE ids for CVE-2008-1262
-
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.Assigned by: [email protected] (Primary)
References for CVE-2008-1262
- http://www.securityfocus.com/archive/1/489009/100/0/threaded
-
http://www.gnucitizen.org/projects/router-hacking-challenge/
Exploit
-
http://www.securityfocus.com/bid/28122
Exploit
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/41052
-
http://www.vupen.com/english/advisories/2008/0802/references
-
http://www.kb.cert.org/vuls/id/248372
US Government Resource
-
http://airspan4wimax.googlepages.com/
Exploit
- http://www.sharemethods.net/nepal/servlet/open?keeppath=false&aid=29820
-
http://www.0x000000.com/?i=524
Products affected by CVE-2008-1262
- cpe:2.3:h:airspan:wimax_prost:4.1:*:6.5.38.0:*:*:*:*:*