CVE-2016-5068 Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 do not require authentication for Embedded_Ace_Get_Task.cgi…

Description

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 do not require authentication for Embedded_Ace_Get_Task.cgi requests.

Affected products and versions

Product	Affected versions	Fixed in
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2	Versions not published

Other CVEs of Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2

The 7 CVEs of Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 →

CVE-2016-5065 Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Embedded_Ace_Set_Task.cgi command injection Not rated CVE-2016-5066 Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 have weak passwords for admin, rauser, sconsole, and user Not rated CVE-2016-5067 Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Hayes AT command injection Not rated CVE-2016-5069 Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use guessable session tokens, which are in the URL Not rated