Vulnerability in Intel Wimax Network Service
CVE-2013-4218
The InitMethodAndPassword function in InfraStack/OSAgnostic/WiMax/Agents/Supplicant/Source/SupplicantAgent.c in the Intel WiMAX Network Service through 1.5.2 for Intel Wireless WiMAX Connection 2400 devices uses the same RSA private key in supplicant_key.pem on all systems, which allows local users to obtain sensitive information via unspecified decryption operations.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.003 (23.6th percentile) — read the EPSS interpretation.
Affected products
- Intel Wimax_network_service — versions 1.5.0
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (mailing-list, x_refsource_MLIST)
- secalert@redhat.com (x_refsource_CONFIRM)