Not rated
CVE-2016-5069 Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use guessable session tokens, which are in the URL
Description
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use guessable session tokens, which are in the URL.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 | Versions not published |
References
- carvesystems.com carvesystems.com
Timeline
- Published
- Last modified
Other CVEs of Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2
The 7 CVEs of Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 →
CVE-2016-5065
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Embedded_Ace_Set_Task.cgi command injection
Not rated
CVE-2016-5066
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 have weak passwords for admin, rauser, sconsole, and user
Not rated
CVE-2016-5067
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Hayes AT command injection
Not rated
CVE-2016-5068
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 do not require authentication for Embedded_Ace_Get_Task.cgi…
Not rated