CVE-2017-6044

CVE-2017-6044 affects Sierra Wireless AirLink Raven XE (all versions before 4.0.14) and Raven XT (all versions before 4.0.11). The vulnerability stems from an improper authorization flaw that allows access to several files and directories without authentication, enabling a remote attacker to perf...

Sierra Wireless AirLink Raven XE and XT

CVSS v3 10.0 ATTENTION: Remotely exploitable/low skill level to exploit. Public exploits are available. Vendor: Sierra Wireless Equipment: AirLink Raven XE and XT Vulnerabilities: Improper Authorization, Cross-Site Request Forgery, Insufficiently Protected Credentials REPOSTED INFORMATION This...