535 matches found
CVE-2016-5066
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 have weak passwords for admin, rauser, sconsole, and user...
CVE-2016-5070
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 store passwords in cleartext...
CVE-2016-5069
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use guessable session tokens, which are in the URL...
CVE-2016-5071
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 execute the management web application as root...
CVE-2016-5065
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow EmbeddedAceSetTask.cgi command injection...
CVE-2016-5067
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Hayes AT command injection...
CVE-2016-5068
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 do not require authentication for EmbeddedAceGetTask.cgi requests...
CVE-2016-5070
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 store passwords in cleartext...
CVE-2016-5069
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use guessable session tokens, which are in the URL...
CVE-2016-5071
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 execute the management web application as root...
Code injection
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 have weak passwords for admin, rauser, sconsole, and user...
Command injection
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Hayes AT command injection...
Session fixation
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use guessable session tokens, which are in the URL...
CVE-2016-5067
CVE-2016-5067 concerns Sierra Wireless GX440 devices running ALEOS firmware 4.3.2, where a Hayes AT command injection vulnerability exists. The vulnerability enables a remote attacker to inject and execute arbitrary commands via AT command handling in the gateway device, per connected CNVD/NVD en...
CVE-2016-5066
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 have weak passwords for admin, rauser, sconsole, and user...
CVE-2016-5068
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 do not require authentication for EmbeddedAceGetTask.cgi requests...
CVE-2016-5065
The CVE-2016-5065 entry affects Sierra Wireless GX440 devices running ALEOS firmware (notably 4.3.2), where the Embedded_Ace_Set_Task.cgi component is vulnerable to a command-injection that can be triggered remotely to execute arbitrary commands. Public connected sources (CNVD-2017-10181) describ...
CVE-2016-5071
CVE-2016-5071 affects Sierra Wireless GX440 devices running ALEOS firmware 4.3.2. The vulnerability allows the management web application to be executed with root privileges, enabling elevation of privilege. CVSS indicates high impact across confidentiality, integrity, and availability. No remedi...
CVE-2016-5066
The CVE-2016-5066 entry concerns Sierra Wireless GX440 devices running ALEOS firmware 4.3.2 with weak passwords for admin, rauser, sconsole, and user. Public sources in connected documents corroborate a credential weakness affecting the GX440 gateway, enabling potential unauthorized access if cre...