Lucene search
HistoryJan 15, 2014 - 4:08 p.m.
CVE-2013-2819
sierra wireless
airlink raven x
ev-do gateway
cve-2013-2819
cleartext credentials
firmware
remote attackers
nvd
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.0%
The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows remote attackers to install Trojan horse firmware by leveraging cleartext credentials in a crafted (1) update or (2) reprogramming action.
Affected configurations
Node
sierrawirelessraven_x_ev-do_firmwareMatch4221_4.0.11.003
ORsierrawirelessraven_x_ev-do_firmwareMatch4228_4.0.11.003
sierrawirelessairlink_mp_at\&tMatch-
ORsierrawirelessairlink_mp_at\&t_wifiMatch-
ORsierrawirelessairlink_mp_bellMatch-
ORsierrawirelessairlink_mp_bell_wifiMatch-
ORsierrawirelessairlink_mp_rowMatch-
ORsierrawirelessairlink_mp_row_wifiMatch-
ORsierrawirelessairlink_mp_sprintMatch-
ORsierrawirelessairlink_mp_sprint_wifiMatch-
ORsierrawirelessairlink_mp_telusMatch-
ORsierrawirelessairlink_mp_telus_wifiMatch-
ORsierrawirelessairlink_mp_verizonMatch-
ORsierrawirelessairlink_mp_verizon_wifiMatch-
ORsierrawirelesspinpoint_xMatch-
ORsierrawirelesspinpoint_xtMatch-
ORsierrawirelessraven_xMatch-
ORsierrawirelessraven_x_ev-doMatch-
ORsierrawirelessraven_xeMatch-
ORsierrawirelessraven_xtMatch-
Related
cvelist
cvelist
CVE-2013-2819
2014-01-15 16:00:00
prion
prion
Deserialization of untrusted data
2014-01-15 16:08:00
nvd
nvd
CVE-2013-2819
2014-01-15 16:08:13
ics
ics
Sierra Wireless AirLink Raven X EV-DO Vulnerabilities (Update B)
2018-09-06 12:00:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.0%
Related for CVE-2013-2819