CVE-2016-5066

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 have weak passwords for admin, rauser, sconsole, and user...

CVE-2016-5066

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 have weak passwords for admin, rauser, sconsole, and user...

CVE-2016-5071

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 execute the management web application as root...

CVE-2016-5071

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 execute the management web application as root...

CVE-2016-5065

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow EmbeddedAceSetTask.cgi command injection...

CVE-2016-5068

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 do not require authentication for EmbeddedAceGetTask.cgi requests...

CVE-2016-5069

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use guessable session tokens, which are in the URL...

CVE-2016-5069

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use guessable session tokens, which are in the URL...

CVE-2016-5070

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 store passwords in cleartext...

Command injection

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow EmbeddedAceSetTask.cgi command injection...

Command injection

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Hayes AT command injection...

Code injection

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 execute the management web application as root...

Code injection

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 have weak passwords for admin, rauser, sconsole, and user...

Session fixation

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use guessable session tokens, which are in the URL...

Authentication flaw

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 do not require authentication for EmbeddedAceGetTask.cgi requests...

Design/Logic Flaw

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 store passwords in cleartext...

CVE-2016-5065

The CVE-2016-5065 entry affects Sierra Wireless GX440 devices running ALEOS firmware (notably 4.3.2), where the Embedded_Ace_Set_Task.cgi component is vulnerable to a command-injection that can be triggered remotely to execute arbitrary commands. Public connected sources (CNVD-2017-10181) describ...

CVE-2016-5069

CVE-2016-5069 affects Sierra Wireless GX440 devices running ALEOS firmware 4.3.2, where session tokens are guessable and exposed in the URL. The vulnerability allows an attacker to potentially access the management web application, per NVD entry and CNVD-2017-16017, which notes a fixed session vu...

CVE-2016-5069

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use guessable session tokens, which are in the URL...

CVE-2016-5066

The CVE-2016-5066 entry concerns Sierra Wireless GX440 devices running ALEOS firmware 4.3.2 with weak passwords for admin, rauser, sconsole, and user. Public sources in connected documents corroborate a credential weakness affecting the GX440 gateway, enabling potential unauthorized access if cre...