15 matches found
EUVD-2016-6024
Malware in sbrugna...
CVE-2016-5068
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 do not require authentication for EmbeddedAceGetTask.cgi requests...
Session fixation
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use guessable session tokens, which are in the URL...
CVE-2016-5071: Undefined Security Weakness
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 execute the management web application as root...
CVE-2016-5068: Improper Authentication
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 do not require authentication for EmbeddedAceGetTask.cgi requests...
CVE-2016-5066: Undefined Security Weakness
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 have weak passwords for admin, rauser, sconsole, and user...
CVE-2016-5065: Improper Neutralization of Special Elements used in a Command
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow EmbeddedAceSetTask.cgi command injection...
CVE-2016-5070: Undefined Security Weakness
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 store passwords in cleartext...
CVE-2016-5069: Insufficient Session Expiration
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use guessable session tokens, which are in the URL...
PT-2017-8684
Name of the Vulnerable Software and Affected Versions Sierra Wireless GX 440 version 4.3.2 Description The issue allows for Hayes AT command injection. Recommendations For version 4.3.2, update to a newer version that contains a fix for this issue...
PT-2017-8683
Name of the Vulnerable Software and Affected Versions Sierra Wireless GX 440 version 4.3.2 Description The issue allows for command injection through the Embedded Ace Set Task.cgi command. Recommendations For version 4.3.2, consider restricting access to the Embedded Ace Set Task.cgi command unti...
PT-2017-8685
Name of the Vulnerable Software and Affected Versions Sierra Wireless GX 440 version 4.3.2 Description The issue concerns a lack of authentication requirement for Embedded Ace Get Task.cgi requests. Recommendations For Sierra Wireless GX 440 version 4.3.2, consider restricting access to the...
PT-2017-8686
Name of the Vulnerable Software and Affected Versions Sierra Wireless GX 440 version 4.3.2 Description The issue concerns the use of guessable session tokens in the URL. Recommendations For version 4.3.2, consider restricting access to the device until a patch is available. As a temporary...
PT-2017-8687
Name of the Vulnerable Software and Affected Versions Sierra Wireless GX 440 version 4.3.2 Description The issue concerns the storage of passwords in cleartext. This means that passwords are not properly encrypted, potentially allowing unauthorized access to sensitive information. Recommendations...