Lucene search

MitreCVE-2019-13988

HistoryDec 26, 2022 - 9:15 p.m.

CVE-2019-13988

2022-12-2621:15:10

mitre

web.nvd.nist.gov

sierra wireless

mgos

cve-2019-13988

log file

direct request

forced browsing

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

28.4%

JSON

Sierra Wireless MGOS before 3.15.2 and 4.x before 4.3 allows attackers to read log files via a Direct Request (aka Forced Browsing).

Affected configurations

Nvd

Node

sierrawirelessairlink_mg90Match-

AND

sierrawirelessmgosRange<4.3

Node

sierrawirelessairlink_omg2000Match-

AND

sierrawirelessmgosRange<3.15.2

VendorProductVersionCPE
sierrawirelessairlink_mg90-cpe:2.3:h:sierrawireless:airlink_mg90:-:*:*:*:*:*:*:*
sierrawirelessmgos*cpe:2.3:o:sierrawireless:mgos:*:*:*:*:*:*:*:*
sierrawirelessairlink_omg2000-cpe:2.3:h:sierrawireless:airlink_omg2000:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sierrawireless	airlink_mg90	-	cpe:2.3:h:sierrawireless:airlink_mg90:-:::::::*
sierrawireless	mgos	*	cpe:2.3:o:sierrawireless:mgos::::::::
sierrawireless	airlink_omg2000	-	cpe:2.3:h:sierrawireless:airlink_omg2000:-:::::::*

References

source.sierrawireless.com/-/media/support_downloads/security-bulletins/pdf/swi-psa-2020-006---mgos-security-update.ashx

www.sierrawireless.com/company/security/

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

28.4%

JSON

Related for CVE-2019-13988