Sierra Wireless ALEOS Administrator Access Gain Vulnerability

Founded in 1993 in Canada, Sierra Wireless provides hardware, software, and services in the wireless marketplace, delivering innovative, reliable, and high-performance solutions to its customers.ALEOS is the application framework... A security vulnerability in Sierra Wireless ALEOS versions prior...

CVE-2015-2897

Sierra Wireless ALEOS before 4.4.2 on AirLink ES, GX, and LS devices has hardcoded root accounts, which makes it easier for remote attackers to obtain administrative access via a 1 SSH or 2 TELNET session...

Hardcoded credentials

Sierra Wireless ALEOS before 4.4.2 on AirLink ES, GX, and LS devices has hardcoded root accounts, which makes it easier for remote attackers to obtain administrative access via a 1 SSH or 2 TELNET session...

CVE-2015-2897

Sierra Wireless ALEOS before 4.4.2 on AirLink ES, GX, and LS devices has hardcoded root accounts, which makes it easier for remote attackers to obtain administrative access via a 1 SSH or 2 TELNET session...

CVE-2015-2897

CVE-2015-2897 affects Sierra Wireless ALEOS on GX, ES, and LS gateways (before 4.4.2). The issue is multiple hard-coded root accounts that are enabled by default and reachable via SSH or TELNET, enabling a remote attacker to gain full administrative control. The CERT/CCE entry notes these credent...

Sierra Wireless GX, ES, and LS gateways running ALEOS contain hard-coded credentials

Overview Sierra Wireless GX, ES, and LS gateway devices running ALEOS versions 4.4.1 and earlier contain hard-coded credentials. Description CWE-259: Use of Hard-coded Password - CVE-2015-2897Sierra Wireless GX, ES, and LS gateways running ALEOS contain multiple hard-coded accounts with root...