CVE-2016-5068: Improper Authentication

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 do not require authentication for EmbeddedAceGetTask.cgi requests...

CVE-2016-5067: Improper Neutralization of Special Elements used in a Command

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Hayes AT command injection...

CVE-2016-5071: Undefined Security Weakness

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 execute the management web application as root...

CVE-2016-5065: Improper Neutralization of Special Elements used in a Command

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow EmbeddedAceSetTask.cgi command injection...

CVE-2016-5069: Insufficient Session Expiration

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use guessable session tokens, which are in the URL...

CVE-2016-5070: Undefined Security Weakness

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 store passwords in cleartext...

CVE-2016-5066: Undefined Security Weakness

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 have weak passwords for admin, rauser, sconsole, and user...

Sierra Wireless AceManager File Disclosure Vulnerability (ICSA-16-105-01) - Active Check

Sierra Wireless AceManager is prone to a file disclosure vulnerability SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Sierra Wireless AceManager Detection (HTTP)

HTTP based detection Sierra Wireless AceManager. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

ALEOS Sensitive Information Disclosure Vulnerability in Multiple Sierra Wireless Devices

Sierra Wireless ALEOS on ES440, ES450, GX400, GX440, GX450, and LS300 is a set of application frameworks that run in the ES440, ES450, GX400, GX440, GX450, and LS300 Smart Gateway devices. A security vulnerability in ACEmanager for Sierra Wireless ALEOS in multiple Sierra Wireless devices allows...

CVE-2015-6479

ACEmanager in Sierra Wireless ALEOS 4.4.2 and earlier on ES440, ES450, GX400, GX440, GX450, and LS300 devices allows remote attackers to read the filteredlogs.txt file, and consequently discover potentially sensitive boot-sequence information, via unspecified vectors...

Information disclosure

ACEmanager in Sierra Wireless ALEOS 4.4.2 and earlier on ES440, ES450, GX400, GX440, GX450, and LS300 devices allows remote attackers to read the filteredlogs.txt file, and consequently discover potentially sensitive boot-sequence information, via unspecified vectors...

CVE-2015-6479

CVE-2015-6479 affects Sierra Wireless ACEmanager in ALEOS 4.4.2 and earlier on ES440, ES450, GX400, GX440, GX450, and LS300. It is a remote information-disclosure vulnerability that allows reading the filteredlogs.txt file, potentially exposing boot-sequence details. The issue is due to access to...

CVE-2015-6479

ACEmanager in Sierra Wireless ALEOS 4.4.2 and earlier on ES440, ES450, GX400, GX440, GX450, and LS300 devices allows remote attackers to read the filteredlogs.txt file, and consequently discover potentially sensitive boot-sequence information, via unspecified vectors...

CVE-2015-6479: Undefined Security Weakness

ACEmanager in Sierra Wireless ALEOS 4.4.2 and earlier on ES440, ES450, GX400, GX440, GX450, and LS300 devices allows remote attackers to read the filteredlogs.txt file, and consequently discover potentially sensitive boot-sequence information, via unspecified vectors...

Information Disclosure Vulnerability in Multiple Sierra Wireless Products

Sierra Wireless LS300, GX400/440/450 and ES440/450 running ALEOS is a set of application frameworks that run in the LS300, GX400/440/450 and ES440/450 gateway devices. Multiple Sierra Wireless filteredlogs.txt files are visible to unauthenticated users, allowing remote attackers to exploit the...

Sierra Wireless ACEmanager Information Exposure Vulnerability

OVERVIEW Independent researcher Maxim Rupp has identified an exposure of sensitive information vulnerability in the Sierra Wireless ACEmanager application. Sierra Wireless has produced a new version to mitigate this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS...

Sierra Wireless ALEOS Administrator Access Gain Vulnerability

Founded in 1993 in Canada, Sierra Wireless provides hardware, software, and services in the wireless marketplace, delivering innovative, reliable, and high-performance solutions to its customers.ALEOS is the application framework... A security vulnerability in Sierra Wireless ALEOS versions prior...

CVE-2015-2897

Sierra Wireless ALEOS before 4.4.2 on AirLink ES, GX, and LS devices has hardcoded root accounts, which makes it easier for remote attackers to obtain administrative access via a 1 SSH or 2 TELNET session...

Hardcoded credentials

Sierra Wireless ALEOS before 4.4.2 on AirLink ES, GX, and LS devices has hardcoded root accounts, which makes it easier for remote attackers to obtain administrative access via a 1 SSH or 2 TELNET session...