Sierra Wireless ALEOS Cross-Site Scripting Vulnerability

Sierra Wireless ALEOS AAF is a framework for creating applications in Sierra Wireless AirLink gateways from Sierra Wireless Canada. Sierra Wireless ALEOS ALEOS 4.16 and prior versions have a cross-site scripting vulnerability that stems from the presence of a stored cross-site scripting XSS...

Sierra Wireless ALEOS Security Vulnerability

Sierra Wireless ALEOS AAF is a framework for creating applications in Sierra Wireless AirLink gateways from Sierra Wireless Canada. A security vulnerability exists in Sierra Wireless ALEOS 4.16 and prior versions that stems from the ACEManager component not validating input, allowing an attacker ...

Sierra Wireless ALEOS Code Issue Vulnerability

Sierra Wireless ALEOS AAF is a framework for creating applications in Sierra Wireless AirLink gateways from Sierra Wireless Canada. A code issue vulnerability exists in Sierra Wireless ALEOS 4.16 and prior versions that stems from a denial of service DOS vulnerability in the ACEManager component...

Sierra Wireless ALEOS Buffer Error Vulnerability

Sierra Wireless ALEOS AAF is a framework for creating applications in Sierra Wireless AirLink gateways from Sierra Wireless Canada. A security vulnerability exists in Sierra Wireless ALEOS versions 4.16 and earlier, which stems from the inclusion of an open source component that results in a deni...

Sierra Wireless ALEOS 操作系统命令注入漏洞

Sierra Wireless ALEOS AAF is a framework for creating applications in Sierra Wireless AirLink gateways from Sierra Wireless Canada. A security vulnerability exists in Sierra Wireless ALEOS that originates from a user with valid credentials being able to manipulate IP records to execute arbitrary...

The vulnerability of the microprogramming software of Sierra Wireless’ wireless gateways—AirLink GX450, AirLink ES440, AirLink GX440, and AirLink LS300—allows a hacker to gain access to the device with administrator privileges.

The vulnerability of the microprogramming software in Sierra Wireless’ wireless gateways—AirLink GX450, AirLink ES440, AirLink GX440, and AirLink LS300—is related to the presence of a pre-installed user with administrator privileges. Exploiting this vulnerability allows a malicious actor to gain...