Sierra Wireless ACEmanager Information Exposure Vulnerability

🗓️ 16 Jan 2016 07:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 28 Views

Sierra Wireless ACEmanager Information Exposure Vulnerability in ALEOS 4.4.2 and earlier versions. Vulnerability allows unauthorized access to filteredlogs.txt, potentially revealing operational characteristics of the device. Update available for mitigation

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2016-6479	21 Apr 201611:00	–	attackerkb
CNVD	ALEOS Sensitive Information Disclosure Vulnerability in Multiple Sierra Wireless Devices	24 Apr 201600:00	–	cnvd
CVE	CVE-2015-6479	21 Apr 201610:00	–	cve
CVE	CVE-2016-6479	21 Apr 201610:00	–	cve
Cvelist	CVE-2015-6479	21 Apr 201610:00	–	cvelist
EUVD	EUVD-2015-6420	7 Oct 202500:30	–	euvd
NVD	CVE-2015-6479	21 Apr 201610:59	–	nvd
NVD	CVE-2016-6479	21 Apr 201611:00	–	nvd
OpenVAS	Sierra Wireless AceManager File Disclosure Vulnerability (ICSA-16-105-01) - Active Check	17 May 201600:00	–	openvas
Prion	Information disclosure	21 Apr 201610:59	–	prion

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2016/icsa-16-105-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-16-105-01
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014

16 Jan 2016 07:00Current

4.7Medium risk

Vulners AI Score4.7

CVSS 3.14.3

CVSS 24.3

EPSS0.00019