Fixed Session Vulnerability in Sierra Wireless GX440

The Sierra Wireless GX440 is a gateway device from Sierra Wireless Canada. A security vulnerability exists in Sierra Wireless GX440 devices using version 4.3.2 of the ALEOS firmware. An attacker could exploit the vulnerability to access the management web application...

CVE-2016-5065

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow EmbeddedAceSetTask.cgi command injection...

CVE-2016-5071

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 execute the management web application as root...

Command injection

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow EmbeddedAceSetTask.cgi command injection...