sierrawireless Vulnerability Advisory Catalog

Total 56 security vulnerabilities recorded for sierrawireless software and firmware.

← Back to All Vendors
Component: aleos

A stack overflow vulnerabiltity exist in the AT command interface of ALEOS before 4.11.0. The vulnerability may allow code execution...

📅 2020-08-21
CVSS 6.3 Dossier →
Component: aleos

A stack overflow vulnerabiltity exists in the AT command APIs of ALEOS before 4.11.0. The vulnerability may allow code execution....

📅 2020-08-21
CVSS 6.3 Dossier →
Component: aleos

An API abuse vulnerability exists in the AT command API of ALEOS before 4.13.0, 4.9.5, 4.4.9 due to lack of length checking when handling certain user...

📅 2020-08-21
CVSS 4.1 Dossier →
Component: aleos

An improper privilege management vulnerabitlity exists in ALEOS before 4.11.0, 4.9.4 and 4.4.9. An authenticated user can escalate to root via the com...

📅 2020-08-21
CVSS 7.3 Dossier →
Component: mobile_broadband_driver_package

The Sierra Wireless Windows Mobile Broadband Driver Packages (MBDP) before build 5043 allows an unprivileged user to overwrite arbitrary files in arbi...

📅 2020-04-15
CVSS 7.8 Dossier →
Component: airlink_es450_firmware

An exploitable unverified password change vulnerability exists in the ACEManager upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A...

📅 2019-10-31
CVSS 7.1 Dossier →
Component: airlink_es450_firmware

An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW ...

📅 2019-05-06
CVSS 8.8 Dossier →
Component: airlink_es450_firmware

An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW ...

📅 2019-05-06
CVSS 8.8 Dossier →
Component: airlink_es450_firmware

An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW...

📅 2019-05-06
CVSS 8.8 Dossier →
Component: airlink_es450_firmware

An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW...

📅 2019-05-06
CVSS 8.8 Dossier →
CVE-2018-4067 MEDIUM
Component: airlink_es450_firmware

An exploitable information disclosure vulnerability exists in the ACEManager template_load.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3...

📅 2019-05-06
CVSS 6.5 Dossier →
Component: airlink_es450_firmware

An exploitable cross-site request forgery vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially ...

📅 2019-05-06
CVSS 8.8 Dossier →
CVE-2018-4065 MEDIUM
Component: airlink_es450_firmware

An exploitable cross-site scripting vulnerability exists in the ACEManager ping_result.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A ...

📅 2019-05-06
CVSS 6.1 Dossier →
Component: aleos

An exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially craft...

📅 2019-05-06
CVSS 8.8 Dossier →
Component: airlink_es450_firmware

A hard-coded credentials vulnerability exists in the snmpd function of the Sierra Wireless AirLink ES450 FW 4.9.3. Activating snmpd outside of the Web...

📅 2019-05-06
CVSS 8.1 Dossier →
Component: airlink_es450_firmware

An information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The ACEManage...

📅 2019-05-06
CVSS 7.5 Dossier →
CVE-2018-4068 MEDIUM
Component: airlink_es450_firmware

An exploitable information disclosure vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A HTTP request c...

📅 2019-05-06
CVSS 5.3 Dossier →
Component: airlink_es450_firmware

An exploitable command injection vulnerability exists in the ACEManager iplogging.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A speci...

📅 2019-05-06
CVSS 8.8 Dossier →
CVE-2018-10251 CRITICAL
Component: aleos

A vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware before 4.4.7 and GX450, ES450, RV50, RV50X, MP70, and ...

📅 2018-05-04
CVSS 9.8 Dossier →
Component: gx440_firmware

A vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware before 4.4.5 and GX450, ES450, RV50, RV50X, MP70, and ...

📅 2018-05-04
CVSS 8.8 Dossier →
Component: sierra_wireless_em7345_software

Multiple unquoted service path vulnerabilities in Sierra Wireless Windows Mobile Broadband Driver Package (MBDP) with build ID < 4657 allows local use...

📅 2017-08-02
CVSS 7.8 Dossier →
Component: aleos_firmware

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 execute the management web application as root....

📅 2017-04-10
CVSS 8.8 Dossier →
CVE-2016-5070 CRITICAL
Component: aleos_firmware

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 store passwords in cleartext....

📅 2017-04-10
CVSS 9.8 Dossier →
CVE-2016-5069 CRITICAL
Component: aleos_firmware

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use guessable session tokens, which are in the URL....

📅 2017-04-10
CVSS 9.8 Dossier →
Page 2 of 3 (56 Total Records)