12 matches found
CVE-2020-13712
A command injection is possible through the user interface, allowing arbitrary command execution as the root user. oMG2000 running MGOS 3.15.1 or earlier is affected. MG90 running MGOS 4.2.1 or earlier is affected...
CVE-2020-13712
Sierra Wireless MGOS is vulnerable to a command injection flaw in its user interface, which allows an attacker to execute arbitrary commands with root privileges. The affected products include oMG2000 running MGOS version 3.15.1 or earlier and MG90 running MGOS version 4.2.1 or earlier. To remedi...
CVE-2020-13712 MGOS Command Injection
A command injection is possible through the user interface, allowing arbitrary command execution as the root user. oMG2000 running MGOS 3.15.1 or earlier is affected. MG90 running MGOS 4.2.1 or earlier is affected...
CVE-2020-13712 MGOS Command Injection
A command injection is possible through the user interface, allowing arbitrary command execution as the root user. oMG2000 running MGOS 3.15.1 or earlier is affected. MG90 running MGOS 4.2.1 or earlier is affected...
CVE-2020-13712: Improper Neutralization of Special Elements used in an OS Command
A command injection is possible through the user interface, allowing arbitrary command execution as the root user. oMG2000 running MGOS 3.15.1 or earlier is affected. MG90 running MGOS 4.2.1 or earlier is affected...
CVE-2019-13988
Sierra Wireless MGOS before 3.15.2 and 4.x before 4.3 allows attackers to read log files via a Direct Request aka Forced Browsing...
Design/Logic Flaw
Sierra Wireless MGOS before 3.15.2 and 4.x before 4.3 allows attackers to read log files via a Direct Request aka Forced Browsing...
CVE-2019-13988
Sierra Wireless MGOS before 3.15.2 and 4.x before 4.3 allows attackers to read log files via a Direct Request aka Forced Browsing...
Sierra Wireless MGOS 安全漏洞
Sierra Wireless MGOS is a wireless communication device from Sierra Wireless Canada. A security vulnerability exists in Sierra Wireless MGOS versions prior to 3.15.2 and versions prior to 4.x through 4.3, which stems from a vulnerability that allows an attacker to read log files via Direct Reques...
PT-2022-8092 · Sierra Wireless · Sierra Wireless Mgos
Name of the Vulnerable Software and Affected Versions: Sierra Wireless MGOS versions prior to 3.15.2 Sierra Wireless MGOS versions 4.x prior to 4.3 Description: The issue allows attackers to read log files via a Direct Request, also known as Forced Browsing. This can potentially expose sensitive...
CVE-2019-13988: Undefined Security Weakness
Sierra Wireless MGOS before 3.15.2 and 4.x before 4.3 allows attackers to read log files via a Direct Request aka Forced Browsing...
CVE-2019-13988
Summary of CVE-2019-13988 : Sierra Wireless MGOS is affected. Versions before 3.15.2, and 4.x before 4.3, allow attackers to read log files via a Direct Request (also known as Forced Browsing). The underlying issue enables unauthorized access to log data without authentication, as described acros...