Details of VAR-201510-0733

ID

VAR-201510-0733

TITLE

Long Term Evolution Information Disclosure Vulnerability

Trust: 1.2

sources: CNVD: CNVD-2015-07377 // CNNVD: CNNVD-201511-066

DESCRIPTION

Long Term Evolution (LTE) is a 4G wireless broadband technology developed by the 3rd Generation Partnership Project (3GPP) project team. An information disclosure vulnerability exists in LTE equipment. Attackers can use this vulnerability to obtain sensitive information and perform man-in-the-middle attacks. Long Term Evolution (LTE) devices are prone to multiple information-disclosure vulnerabilities. Successful exploits may lead to other attacks

Trust: 1.35

sources: CNVD: CNVD-2015-07377 // CNNVD: CNNVD-201511-066 // BID: 77383

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2015-07377

AFFECTED PRODUCTS

vendor:	3gpp	model:	long term evolution	scope:	-	version:	-	Trust: 0.6
vendor:	long	model:	term evolution long term evolution	scope:	eq	version:	0	Trust: 0.3

sources: CNVD: CNVD-2015-07377 // BID: 77383

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD:	CNVD-2015-07377
value:	MEDIUM
Trust: 0.6

CNVD:	CNVD-2015-07377
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

sources: CNVD: CNVD-2015-07377

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201511-066

TYPE

information disclosure

Trust: 0.6

sources: CNNVD: CNNVD-201511-066

EXTERNAL IDS

db:	BID	id:	77383	Trust: 1.5
db:	CNVD	id:	CNVD-2015-07377	Trust: 0.6
db:	CNNVD	id:	CNNVD-201511-066	Trust: 0.6

sources: CNVD: CNVD-2015-07377 // BID: 77383 // CNNVD: CNNVD-201511-066

REFERENCES

url:	http://www.securityfocus.com/bid/77383	Trust: 1.2
url:	http://www.3gpp.org/technologies/keywords-acronyms/98-lte	Trust: 0.3
url:	http://www.scmagazine.com/researchers-demonstrate-attacks-against-lte-devices-to-expose-vulnerabilities-and-practical-attack-points/article/450104/	Trust: 0.3

sources: CNVD: CNVD-2015-07377 // BID: 77383 // CNNVD: CNNVD-201511-066

CREDITS

Unknown

Trust: 0.3

sources: BID: 77383

SOURCES

db:	CNVD	id:	CNVD-2015-07377
db:	BID	id:	77383
db:	CNNVD	id:	CNNVD-201511-066

LAST UPDATE DATE

2022-05-17T02:08:06.364000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2015-07377	date:	2015-11-10T00:00:00
db:	BID	id:	77383	date:	2015-10-28T00:00:00
db:	CNNVD	id:	CNNVD-201511-066	date:	2015-11-05T00:00:00

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2015-07377	date:	2015-11-10T00:00:00
db:	BID	id:	77383	date:	2015-10-28T00:00:00
db:	CNNVD	id:	CNNVD-201511-066	date:	2015-10-28T00:00:00