CVE-2019-13988

Sierra Wireless MGOS before 3.15.2 and 4.x before 4.3 allows attackers to read log files via a Direct Request aka Forced Browsing...

CVE-2019-13988

Sierra Wireless MGOS before 3.15.2 and 4.x before 4.3 allows attackers to read log files via a Direct Request aka Forced Browsing...

Design/Logic Flaw

Sierra Wireless MGOS before 3.15.2 and 4.x before 4.3 allows attackers to read log files via a Direct Request aka Forced Browsing...

CVE-2020-11101

Sierra Wireless AirLink Mobility Manager AMM before 2.17 mishandles sessions and thus an unauthenticated attacker can obtain a login session with administrator privileges...

CVE-2020-11101

Sierra Wireless AirLink Mobility Manager AMM before 2.17 mishandles sessions and thus an unauthenticated attacker can obtain a login session with administrator privileges...

Design/Logic Flaw

Sierra Wireless AirLink Mobility Manager AMM before 2.17 mishandles sessions and thus an unauthenticated attacker can obtain a login session with administrator privileges...

CVE-2019-11851

The ACENet service in Sierra Wireless ALEOS before 4.4.9, 4.5.x through 4.9.x before 4.9.5, and 4.10.x through 4.13.x before 4.14.0 allows remote attackers to execute arbitrary code via a buffer overflow...

PT-2022-8078 · Sierra Wireless · Sierra Wireless Aleos

Name of the Vulnerable Software and Affected Versions: Sierra Wireless ALEOS versions prior to 4.4.9 Sierra Wireless ALEOS versions 4.5.x through 4.9.x before 4.9.5 Sierra Wireless ALEOS versions 4.10.x through 4.13.x before 4.14.0 Description: The ACENet service in Sierra Wireless ALEOS allows...

Tenda i22 Buffer Overflow Vulnerability

The Tenda i22 is a wireless access point from Tenda China. A buffer overflow vulnerability exists in the Tenda i22 /goform/setcfm, which can be exploited by a remote attacker to submit a special request that can execute arbitrary code in the system context or crash the application...

CVE-2019-13988

Sierra Wireless MGOS before 3.15.2 and 4.x before 4.3 allows attackers to read log files via a Direct Request aka Forced Browsing...

PT-2022-8092 · Sierra Wireless · Sierra Wireless Mgos

Name of the Vulnerable Software and Affected Versions: Sierra Wireless MGOS versions prior to 3.15.2 Sierra Wireless MGOS versions 4.x prior to 4.3 Description: The issue allows attackers to read log files via a Direct Request, also known as Forced Browsing. This can potentially expose sensitive...

CVE-2019-11851

The ACENet service in Sierra Wireless ALEOS before 4.4.9, 4.5.x through 4.9.x before 4.9.5, and 4.10.x through 4.13.x before 4.14.0 allows remote attackers to execute arbitrary code via a buffer overflow...

Sierra Wireless MGOS 安全漏洞

Sierra Wireless MGOS is a wireless communication device from Sierra Wireless Canada. A security vulnerability exists in Sierra Wireless MGOS versions prior to 3.15.2 and versions prior to 4.x through 4.3, which stems from a vulnerability that allows an attacker to read log files via Direct Reques...

CVE-2019-13988

Sierra Wireless MGOS before 3.15.2 and 4.x before 4.3 allows attackers to read log files via a Direct Request aka Forced Browsing...

CVE-2019-11851

The affected product is Sierra Wireless ALEOS, specifically the ACENet service. Affected ranges: before 4.4.9; 4.5.x through 4.9.x before 4.9.5; and 4.10.x through 4.13.x before 4.14.0. Root cause is a buffer overflow in ACENet that allows remote code execution. Exploitation status is not provide...

CVE-2020-11101

Sierra Wireless AirLink Mobility Manager AMM before 2.17 mishandles sessions and thus an unauthenticated attacker can obtain a login session with administrator privileges...

CVE-2020-11101

CVE-2020-11101 affects Sierra Wireless AirLink Mobility Manager (AMM) prior to 2.17. The issue arises from mishandling sessions, allowing an unauthenticated attacker to obtain a login session with administrator privileges. Public records across multiple sources confirm AMM versions before 2.17 ar...

CVE-2019-13988

Summary of CVE-2019-13988 : Sierra Wireless MGOS is affected. Versions before 3.15.2, and 4.x before 4.3, allow attackers to read log files via a Direct Request (also known as Forced Browsing). The underlying issue enables unauthorized access to log data without authentication, as described acros...

Tenda F1203 Command Injection Vulnerability

Tenda F1203 is a 11AC 1200M intelligent dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. and Ali. A command injection vulnerability exists in Tenda F1203 V2.0.1.6. An attacker can use this vulnerability to perform command injection via the mac parameter of...

The vulnerability of Hikvision’s wireless bridge servers DS-3WF0AC-2NT and DS-3WF01C-2N/O lies in access control errors, allowing attackers to elevate their privileges to the level of administrators.

The vulnerability of Hikvision DS-3WF0AC-2NT and DS-3WF01C-2N/O wireless bridge servers is related to access control errors. Exploiting this vulnerability can allow a malicious actor to elevate their privileges to the level of administrator...