sierrawireless Vulnerability Advisory Catalog

Total 56 security vulnerabilities recorded for sierrawireless software and firmware.

← Back to All Vendors
CVE-2016-5068 CRITICAL
Component: aleos_firmware

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 do not require authentication for Embedded_Ace_Get_Task.cgi requests....

📅 2017-04-10
CVSS 9.8 Dossier →
Component: aleos_firmware

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Hayes AT command injection....

📅 2017-04-10
CVSS 8.8 Dossier →
CVE-2016-5066 CRITICAL
Component: aleos_firmware

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 have weak passwords for admin, rauser, sconsole, and user....

📅 2017-04-10
CVSS 9.8 Dossier →
CVE-2016-5065 CRITICAL
Component: aleos_firmware

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Embedded_Ace_Set_Task.cgi command injection....

📅 2017-04-10
CVSS 9.8 Dossier →
CVE-2015-6479 MEDIUM
Component: aleos

ACEmanager in Sierra Wireless ALEOS 4.4.2 and earlier on ES440, ES450, GX400, GX440, GX450, and LS300 devices allows remote attackers to read the filt...

📅 2016-04-21
CVSS 4.3 Dossier →
CVE-2015-2897 UNKNOWN
Component: aleos

Sierra Wireless ALEOS before 4.4.2 on AirLink ES, GX, and LS devices has hardcoded root accounts, which makes it easier for remote attackers to obtain...

📅 2015-08-08
CVSS 10.0 Dossier →
CVE-2013-2820 UNKNOWN
Component: raven_x_ev-do_firmware

The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows remote attackers to reprogram the firmware via a replay a...

📅 2014-01-15
CVSS 10.0 Dossier →
CVE-2013-2819 UNKNOWN
Component: raven_x_ev-do_firmware

The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows remote attackers to install Trojan horse firmware by leve...

📅 2014-01-15
CVSS 9.3 Dossier →
Page 3 of 3 (56 Total Records)