Sign-up

ID

VAR-201312-0282


CVE

CVE-2013-7001


TITLE

NowSMS Now SMS & MMS Gateway of MMSC Service disruption in (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2013-005417

DESCRIPTION

The Multimedia Messaging Centre (MMSC) in NowSMS Now SMS & MMS Gateway before 2013.11.15 allows remote attackers to cause a denial of service via a malformed MM1 message that is routed to a (1) MM4 or (2) MM7 connection. An attacker could use this vulnerability to cause a denial of service. Attackers can exploit these issues to cause denial-of-service conditions

Trust: 2.52

sources: NVD: CVE-2013-7001 // JVNDB: JVNDB-2013-005417 // CNNVD: CNNVD-201311-400 // BID: 63879 // VULHUB: VHN-67003

AFFECTED PRODUCTS

vendor:nowsmsmodel:now sms \& mms gatewayscope:eqversion:2013.09.26

Trust: 1.6

vendor:nowsmsmodel:now sms \& mms gatewayscope:lteversion:2013.11.11

Trust: 1.0

vendor:nowmodel:sms & mms gatewayscope:ltversion:2013.11.15

Trust: 0.8

vendor:nowsmsmodel:now sms \& mms gatewayscope:eqversion:2013.11.11

Trust: 0.6

sources: JVNDB: JVNDB-2013-005417 // CNNVD: CNNVD-201312-120 // NVD: CVE-2013-7001

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2013-7001
value: MEDIUM

Trust: 1.0

NVD: CVE-2013-7001
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-201312-120
value: MEDIUM

Trust: 0.6

VULHUB: VHN-67003
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2013-7001
severity: MEDIUM
baseScore: 4.3
vectorString: AV:N/AC:M/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-67003
severity: MEDIUM
baseScore: 4.3
vectorString: AV:N/AC:M/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-67003 // JVNDB: JVNDB-2013-005417 // CNNVD: CNNVD-201312-120 // NVD: CVE-2013-7001

PROBLEMTYPE DATA

problemtype:CWE-20

Trust: 1.9

sources: VULHUB: VHN-67003 // JVNDB: JVNDB-2013-005417 // NVD: CVE-2013-7001

THREAT TYPE

remote

Trust: 1.2

sources: CNNVD: CNNVD-201311-400 // CNNVD: CNNVD-201312-120

TYPE

input validation

Trust: 0.6

sources: CNNVD: CNNVD-201312-120

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2013-005417

PATCH
title:NowSMS / NowMMS Update 2013.11.15url:http://www.nowsms.com/nowsms20131115
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2013-005417

EXTERNAL IDS
db:NVDid:CVE-2013-7001
Trust: 2.8
db:BIDid:63879
Trust: 2.0
db:SECUNIAid:55805
Trust: 1.7
db:JVNDBid:JVNDB-2013-005417
Trust: 0.8
db:CNNVDid:CNNVD-201312-120
Trust: 0.7
db:CNNVDid:CNNVD-201311-400
Trust: 0.6
db:VULHUBid:VHN-67003
Trust: 0.1
sources:
            
            
            VULHUB: VHN-67003 // 
            
            
            
            BID: 63879 // 
            
            
            
            JVNDB: JVNDB-2013-005417 // 
            
            
            
            CNNVD: CNNVD-201311-400 // 
            
            
            
            CNNVD: CNNVD-201312-120 // 
            
            
            
            NVD: CVE-2013-7001

REFERENCES
url:http://www.securityfocus.com/bid/63879
Trust: 1.7
url:http://www.nowsms.com/nowsms20131115
Trust: 1.7
url:http://secunia.com/advisories/55805
Trust: 1.7
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-7001
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-7001
Trust: 0.8
sources:
            
            
            VULHUB: VHN-67003 // 
            
            
            
            JVNDB: JVNDB-2013-005417 // 
            
            
            
            CNNVD: CNNVD-201311-400 // 
            
            
            
            CNNVD: CNNVD-201312-120 // 
            
            
            
            NVD: CVE-2013-7001

CREDITS
The vendor reported these issues.
Trust: 0.3
sources:
            
            
            BID: 63879

SOURCES
db:VULHUBid:VHN-67003
db:BIDid:63879
db:JVNDBid:JVNDB-2013-005417
db:CNNVDid:CNNVD-201311-400
db:CNNVDid:CNNVD-201312-120
db:NVDid:CVE-2013-7001

LAST UPDATE DATE
2025-04-11T23:04:02.784000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-67003date:2013-12-13T00:00:00
db:BIDid:63879date:2013-12-10T06:17:00
db:JVNDBid:JVNDB-2013-005417date:2013-12-11T00:00:00
db:CNNVDid:CNNVD-201311-400date:2013-11-29T00:00:00
db:CNNVDid:CNNVD-201312-120date:2013-12-10T00:00:00
db:NVDid:CVE-2013-7001date:2025-04-11T00:51:21.963

SOURCES RELEASE DATE
db:VULHUBid:VHN-67003date:2013-12-07T00:00:00
db:BIDid:63879date:2013-11-18T00:00:00
db:JVNDBid:JVNDB-2013-005417date:2013-12-11T00:00:00
db:CNNVDid:CNNVD-201311-400date:2013-11-29T00:00:00
db:CNNVDid:CNNVD-201312-120date:2013-12-10T00:00:00
db:NVDid:CVE-2013-7001date:2013-12-07T21:55:10.157