Sierrawireless vulnerabilities

Products

• Aleos 30
• Airlink Es450 Firmware 12
• Aleos Firmware 7
• Airlink Mp At\&t 2
• Airlink Mp At\&t Wifi 2
• Airlink Mp Bell 2
• Airlink Mp Bell Wifi 2
• Airlink Mp Row 2
• Airlink Mp Row Wifi 2
• Airlink Mp Sprint 2
• Airlink Mp Sprint Wifi 2
• Airlink Mp Telus 2
• Airlink Mp Telus Wifi 2
• Airlink Mp Verizon 2
• Airlink Mp Verizon Wifi 2
• Pinpoint X 2
• Pinpoint Xt 2
• Raven X 2
• Raven Xe 2
• Raven X Ev-do 2
• Raven X Ev-do Firmware 2
• Raven Xt 2

Newest

• sierrawireless aleos OpenNDS, as used in Sierra Wireless ALEOS before 4.17.0.12 and other products, allows remote... CVE-2023-38321 Fix available 7.5 HighDecember 25, 2023
• sierrawireless aleos Improper input leads to DoS CVE-2023-40465 8.3 HighDecember 4, 2023
• sierrawireless aleos Use of hardcoded certificate and private key CVE-2023-40464 8.1 HighDecember 4, 2023
• sierrawireless aleos Use of Hard-Coded Credentials CVE-2023-40463 8.1 HighDecember 4, 2023
• sierrawireless aleos, debian linux +1 more Improper input leads to DoS CVE-2023-40462 7.5 HighDecember 4, 2023
• sierrawireless aleos Cross-site scripting vulnerability in ACEManager CVE-2023-40461 8.1 HighDecember 4, 2023
• sierrawireless aleos Improper input leads to DoS CVE-2023-40460 7.1 HighDecember 4, 2023
• sierrawireless aleos Improper input leads to DoS CVE-2023-40459 Public exploit 7.5 HighDecember 4, 2023
• sierrawireless aleos AceManager DOS Vulnerability CVE-2023-40458 7.5 HighNovember 29, 2023
• sierrawireless aleos Acemanager in ALEOS before version 4.16 allows a user with valid credentials to reconfigure the... CVE-2022-46650 EPSS 12.3% 4.9 MediumFebruary 10, 2023
• sierrawireless aleos Acemanager in ALEOS before version 4.16 allows a user with valid credentials to manipulate the IP... CVE-2022-46649 Public exploit 8.8 HighFebruary 10, 2023
• sierrawireless airlink mobility manager Sierra Wireless AirLink Mobility Manager (AMM) before 2.17 mishandles sessions and thus an... CVE-2020-11101 9.8 CriticalDecember 26, 2022
• sierrawireless mgos Sierra Wireless MGOS before 3.15.2 and 4.x before 4.3 allows attackers to read log files via a... CVE-2019-13988 6.5 MediumDecember 26, 2022
• sierrawireless aleos The ACENet service in Sierra Wireless ALEOS before 4.4.9, 4.5.x through 4.9.x before 4.9.5, and 4... CVE-2019-11851 9.8 CriticalDecember 26, 2022
• sierrawireless aleos ALEOS LAN-Side RPC Service Remote Code Execution CVE-2020-8782 7.5 HighOctober 6, 2020
• sierrawireless aleos Lack of input sanitization in UpdateRebootMgr service of ALEOS 4.11 and later allow an escalation... CVE-2020-8781 7.8 HighOctober 6, 2020
• sierrawireless aleos ALEOS SSH Service Allows Traffic Proxying CVE-2019-11862 8.1 HighAugust 21, 2020
• sierrawireless aleos ALEOS Multiple Web UI vulnerabilities CVE-2019-11858 5.7 MediumAugust 21, 2020
• sierrawireless aleos ALEOS AT Command Injections CVE-2019-11853 3.9 LowAugust 21, 2020
• sierrawireless aleos ALEOS SMS Handler Buffer Overflow CVE-2019-11859 6.0 MediumAugust 21, 2020
• sierrawireless aleos ALEOS AceManager Information Disclosure CVE-2019-11857 9.1 CriticalAugust 21, 2020
• sierrawireless aleos ALEOS ACEView Message Replay CVE-2019-11856 3.3 LowAugust 21, 2020
• sierrawireless aleos ALEOS LAN-Side RPC Server CVE-2019-11855 8.1 HighAugust 21, 2020
• sierrawireless aleos ALEOS ACEView Service Out-Of-Bounds Read CVE-2019-11852 3.7 LowAugust 21, 2020
• sierrawireless aleos ALEOS AT Command API Abuse CVE-2019-11848 4.1 MediumAugust 21, 2020
• sierrawireless aleos ALEOS AT Command Stack Overflow CVE-2019-11850 6.3 MediumAugust 21, 2020
• sierrawireless aleos ALEOS AT API Stack Overflow CVE-2019-11849 6.3 MediumAugust 21, 2020
• sierrawireless aleos ALEOS User Root Shell Escalation CVE-2019-11847 7.3 HighAugust 21, 2020
• sierrawireless mobile broadband driver package The Sierra Wireless Windows Mobile Broadband Driver Packages (MBDP) before build 5043 allows an... CVE-2020-8948 7.8 HighApril 15, 2020
• sierrawireless airlink es450 firmware An exploitable unverified password change vulnerability exists in the ACEManager upload.cgi... CVE-2018-4064 EPSS 14.5% 7.1 HighOctober 31, 2019
• sierrawireless airlink es450 firmware An exploitable information disclosure vulnerability exists in the ACEManager template_load.cgi... CVE-2018-4067 6.5 MediumMay 6, 2019
• sierra wireless airlink aleos, sierrawireless aleos +1 more An exploitable remote code execution vulnerability exists in the upload.cgi functionality of... CVE-2018-4063 In KEV EPSS 27.3% 8.8 HighMay 6, 2019
• sierrawireless airlink es450 firmware An exploitable cross-site request forgery vulnerability exists in the ACEManager functionality of... CVE-2018-4066 8.8 HighMay 6, 2019
• sierrawireless airlink es450 firmware A hard-coded credentials vulnerability exists in the snmpd function of the Sierra Wireless... CVE-2018-4062 8.1 HighMay 6, 2019
• sierrawireless airlink es450 firmware An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task... CVE-2018-4073 EPSS 25.6% 8.8 HighMay 6, 2019
• sierrawireless airlink es450 firmware An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task... CVE-2018-4072 EPSS 26.4% 8.8 HighMay 6, 2019
• sierrawireless airlink es450 firmware An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task... CVE-2018-4071 EPSS 18.3% 8.8 HighMay 6, 2019
• sierrawireless airlink es450 firmware An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task... CVE-2018-4070 EPSS 18.0% 8.8 HighMay 6, 2019
• sierrawireless airlink es450 firmware An exploitable cross-site scripting vulnerability exists in the ACEManager ping_result.cgi... CVE-2018-4065 6.1 MediumMay 6, 2019
• sierrawireless airlink es450 firmware An exploitable command injection vulnerability exists in the ACEManager iplogging.cgi... CVE-2018-4061 EPSS 19.5% 8.8 HighMay 6, 2019
• sierrawireless airlink es450 firmware An exploitable information disclosure vulnerability exists in the ACEManager functionality of... CVE-2018-4068 EPSS 11.4% 5.3 MediumMay 6, 2019
• sierrawireless airlink es450 firmware An information disclosure vulnerability exists in the ACEManager authentication functionality of... CVE-2018-4069 7.5 HighMay 6, 2019
• sierrawireless aleos A vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware... CVE-2018-10251 9.8 CriticalMay 4, 2018
• sierrawireless es440 firmware, es450 firmware, gx400 firmware +7 more +9 more A vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware... CVE-2017-15043 8.8 HighMay 4, 2018
• sierrawireless sierra wireless em7345 software, sierra wireless em7455 software, sierra wireless location sensor driver +2 more Multiple unquoted service path vulnerabilities in Sierra Wireless Windows Mobile Broadband Driver... CVE-2017-9247 7.8 HighAugust 2, 2017
• sierrawireless aleos firmware Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 execute the management web application... CVE-2016-5071 8.8 HighApril 10, 2017
• sierrawireless aleos firmware Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 store passwords in cleartext. CVE-2016-5070 9.8 CriticalApril 10, 2017
• sierrawireless aleos firmware Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use guessable session tokens, which are... CVE-2016-5069 9.8 CriticalApril 10, 2017
• sierrawireless aleos firmware Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 do not require authentication for... CVE-2016-5068 9.8 CriticalApril 10, 2017
• sierrawireless aleos firmware Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Hayes AT command injection. CVE-2016-5067 8.8 HighApril 10, 2017
• Show olderLoading…