CVE-2016-5065

The CVE-2016-5065 entry affects Sierra Wireless GX440 devices running ALEOS firmware (notably 4.3.2), where the Embedded_Ace_Set_Task.cgi component is vulnerable to a command-injection that can be triggered remotely to execute arbitrary commands. Public connected sources (CNVD-2017-10181) describ...

CVE-2016-5069

CVE-2016-5069 affects Sierra Wireless GX440 devices running ALEOS firmware 4.3.2, where session tokens are guessable and exposed in the URL. The vulnerability allows an attacker to potentially access the management web application, per NVD entry and CNVD-2017-16017, which notes a fixed session vu...

CVE-2016-5067

CVE-2016-5067 concerns Sierra Wireless GX440 devices running ALEOS firmware 4.3.2, where a Hayes AT command injection vulnerability exists. The vulnerability enables a remote attacker to inject and execute arbitrary commands via AT command handling in the gateway device, per connected CNVD/NVD en...

CVE-2016-5068

CVE-2016-5068 affects Sierra Wireless GX440 devices with ALEOS firmware 4.3.2, where Embedded_Ace_Get_Task.cgi requests do not require authentication. The CNVD entry notes an authentication issue that could allow an attacker to gain root/shell access on GX440 gateways. The NVD metrics describe a ...

CVE-2016-5065

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow EmbeddedAceSetTask.cgi command injection...

CVE-2016-5066

The CVE-2016-5066 entry concerns Sierra Wireless GX440 devices running ALEOS firmware 4.3.2 with weak passwords for admin, rauser, sconsole, and user. Public sources in connected documents corroborate a credential weakness affecting the GX440 gateway, enabling potential unauthorized access if cre...

CVE-2016-5066

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 have weak passwords for admin, rauser, sconsole, and user...

CVE-2016-5071

CVE-2016-5071 affects Sierra Wireless GX440 devices running ALEOS firmware 4.3.2. The vulnerability allows the management web application to be executed with root privileges, enabling elevation of privilege. CVSS indicates high impact across confidentiality, integrity, and availability. No remedi...

CVE-2016-5071

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 execute the management web application as root...

CVE-2016-5070

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 store passwords in cleartext...

CVE-2016-5070

Sierra Wireless GX440 (GX 440) devices running ALEOS firmware 4.3.2 are affected by a vulnerability where passwords are stored in cleartext. This is documented in CVE-2016-5070 and corroborated by multiple sources (CNVD-2017-10185, NVD entry, CVE list). Impact is exposure of passwords; the exact ...

CVE-2016-5067

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Hayes AT command injection...

CVE-2016-5068

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 do not require authentication for EmbeddedAceGetTask.cgi requests...

Sierra Wireless AceManager File Disclosure Vulnerability (ICSA-16-105-01) - Active Check

Sierra Wireless AceManager is prone to a file disclosure vulnerability SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Sierra Wireless AceManager Detection (HTTP)

HTTP based detection Sierra Wireless AceManager. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

ALEOS Sensitive Information Disclosure Vulnerability in Multiple Sierra Wireless Devices

Sierra Wireless ALEOS on ES440, ES450, GX400, GX440, GX450, and LS300 is a set of application frameworks that run in the ES440, ES450, GX400, GX440, GX450, and LS300 Smart Gateway devices. A security vulnerability in ACEmanager for Sierra Wireless ALEOS in multiple Sierra Wireless devices allows...

CVE-2015-6479

ACEmanager in Sierra Wireless ALEOS 4.4.2 and earlier on ES440, ES450, GX400, GX440, GX450, and LS300 devices allows remote attackers to read the filteredlogs.txt file, and consequently discover potentially sensitive boot-sequence information, via unspecified vectors...

Information disclosure

ACEmanager in Sierra Wireless ALEOS 4.4.2 and earlier on ES440, ES450, GX400, GX440, GX450, and LS300 devices allows remote attackers to read the filteredlogs.txt file, and consequently discover potentially sensitive boot-sequence information, via unspecified vectors...

CVE-2015-6479

CVE-2015-6479 affects Sierra Wireless ACEmanager in ALEOS 4.4.2 and earlier on ES440, ES450, GX400, GX440, GX450, and LS300. It is a remote information-disclosure vulnerability that allows reading the filteredlogs.txt file, potentially exposing boot-sequence details. The issue is due to access to...

CVE-2015-6479

ACEmanager in Sierra Wireless ALEOS 4.4.2 and earlier on ES440, ES450, GX400, GX440, GX450, and LS300 devices allows remote attackers to read the filteredlogs.txt file, and consequently discover potentially sensitive boot-sequence information, via unspecified vectors...