Not rated
CVE-2016-5065 Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Embedded_Ace_Set_Task.cgi command injection
Description
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Embedded_Ace_Set_Task.cgi command injection.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 | Versions not published |
References
- carvesystems.com carvesystems.com
Timeline
- Published
- Last modified
Other CVEs of Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2
The 7 CVEs of Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 →
CVE-2016-5066
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 have weak passwords for admin, rauser, sconsole, and user
Not rated
CVE-2016-5067
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Hayes AT command injection
Not rated
CVE-2016-5068
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 do not require authentication for Embedded_Ace_Get_Task.cgi…
Not rated
CVE-2016-5069
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use guessable session tokens, which are in the URL
Not rated