CVE-2008-1262

Published Mar 10, 2008

Last updated 6 years ago

Overview

Description: The administration panel on the Airspan WiMax ProST 4.1 antenna with 6.5.38.0 software does not verify authentication credentials, which allows remote attackers to (1) upload malformed firmware or (2) bind the antenna to a different WiMAX base station via unspecified requests to forms under process_adv/.
Source: cve@mitre.org
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 10
Impact score: 10
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: CWE-287

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:airspan:wimax_prost:4.1:*:6.5.38.0:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B2D3669F-A37D-4286-A96D-829C54F45DA9"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References