CVE-2013-7136: The UPC Ireland Cisco EPC 2425 router (aka Horizon Box) does not have a sufficiently large number of possib...

Security readout for executives and security teams

This CVE describes weak Wi-Fi password space on the UPC Ireland Cisco EPC 2425, also called Horizon Box. The issue could make it easier for an attacker to guess the WPA-PSK and join the wireless network. The bundle does not provide CVSS, patch status, or evidence of active exploitation. Exposure is most likely where UPC Ireland Cisco EPC 2425 or Horizon Box devices remain deployed with affected WPA-PSK behavior. The provided affected-product metadata is incomplete, so confirm by asset inventory, ISP records, and device model checks. Prioritize remediation where this router protects business networks or sensitive home-office access. The issue is old and metadata is incomplete, but weak Wi-Fi access can expose internal traffic and devices. Replace or reconfigure legacy hardware instead of spending heavily on deep exploit analysis. Mitigation focus: Check UPC/Cisco or ISP guidance for firmware, replacement, or configuration remediation.; Replace affected or unsupported routers where vendor guidance is unavailable.; Use a unique, high-entropy Wi-Fi passphrase not based on device defaults..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.