Skip to content
Noroxi

SierraWireless records

56 published records for vendor sierrawireless.

Researcher profile

Entered KEV
1 · 1.8%
Weaponized
1 · 1.8%
Pre-auth RCE
4
With a fix record
1.8%
Median publish → KEV
2412 days

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 22
  6. 23

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

56 records
  • CVE-2018-4063
    73This week

    An exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3.

    HighCVSS 8.8KEVWeaponizedEPSS 27%

    sierrawireless · aleosMay 6, 2019

  • CVE-2018-4072
    43Plan

    An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sierra Wireless AirLink

    HighCVSS 8.8No exploitEPSS 26%

    sierrawireless · airlink es450 firmwareMay 6, 2019

  • CVE-2018-4073
    43Plan

    An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sierra Wireless AirLink

    HighCVSS 8.8No exploitEPSS 25%

    sierrawireless · airlink es450 firmwareMay 6, 2019

  • CVE-2018-4061
    41Plan

    An exploitable command injection vulnerability exists in the ACEManager iplogging.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.

    HighCVSS 8.8No exploitEPSS 19%

    sierrawireless · airlink es450 firmwareMay 6, 2019

  • CVE-2013-2820
    41Plan

    The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows remote attackers to reprogram the firmware via

    CriticalCVSS 10.0No exploitEPSS 3%

    sierrawireless · raven x ev-do firmwareJan 15, 2014

  • CVE-2015-2897
    41Plan

    Sierra Wireless ALEOS before 4.4.2 on AirLink ES, GX, and LS devices has hardcoded root accounts, which makes it easier for remote attackers

    CriticalCVSS 10.0No exploitEPSS 2%

    sierrawireless · aleosAug 7, 2015

  • CVE-2018-4071
    40Plan

    An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Sierra Wireless AirLin

    HighCVSS 8.8No exploitEPSS 18%

    sierrawireless · airlink es450 firmwareMay 6, 2019

  • CVE-2018-4070
    40Plan

    An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Sierra Wireless AirLin

    HighCVSS 8.8No exploitEPSS 17%

    sierrawireless · airlink es450 firmwareMay 6, 2019

  • CVE-2018-10251
    40Plan

    A vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware before 4.4.7 and GX450, ES450, RV50, RV50X,

    CriticalCVSS 9.8No exploitEPSS 4%

    sierrawireless · aleosMay 4, 2018

  • CVE-2016-5065
    40Plan

    Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Embedded_Ace_Set_Task.cgi command injection.

    CriticalCVSS 9.8No exploitEPSS 2%

    sierrawireless · aleos firmwareApr 9, 2017

  • CVE-2016-5066
    40Plan

    Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 have weak passwords for admin, rauser, sconsole, and user.

    CriticalCVSS 9.8No exploitEPSS 1%

    sierrawireless · aleos firmwareApr 9, 2017

  • CVE-2020-8782
    40Plan

    ALEOS LAN-Side RPC Service Remote Code Execution

    CriticalCVSS 9.8No exploitEPSS 1%

    sierrawireless · aleosOct 6, 2020

  • CVE-2019-11851
    40Plan

    The ACENet service in Sierra Wireless ALEOS before 4.4.9, 4.5.x through 4.9.x before 4.9.5, and 4.10.x through 4.13.x before 4.14.0 allows r

    CriticalCVSS 9.8No exploitEPSS 1%

    sierrawireless · aleosDec 26, 2022

  • CVE-2016-5068
    39Monitor

    Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 do not require authentication for Embedded_Ace_Get_Task.cgi requests.

    CriticalCVSS 9.8No exploitEPSS 1%

    sierrawireless · aleos firmwareApr 9, 2017

  • CVE-2016-5070
    39Monitor

    Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 store passwords in cleartext.

    CriticalCVSS 9.8No exploitEPSS 1%

    sierrawireless · aleos firmwareApr 9, 2017

  • CVE-2016-5069
    39Monitor

    Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use guessable session tokens, which are in the URL.

    CriticalCVSS 9.8No exploitEPSS 1%

    sierrawireless · aleos firmwareApr 9, 2017

  • CVE-2019-11855
    39Monitor

    ALEOS LAN-Side RPC Server

    CriticalCVSS 9.8No exploitEPSS 1%

    sierrawireless · aleosAug 21, 2020

  • CVE-2020-11101
    39Monitor

    Sierra Wireless AirLink Mobility Manager (AMM) before 2.17 mishandles sessions and thus an unauthenticated attacker can obtain a login sessi

    CriticalCVSS 9.8No exploitEPSS 0%

    sierrawireless · airlink mobility managerDec 26, 2022

  • CVE-2013-2819
    38Monitor

    The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows remote attackers to install Trojan horse firmwa

    CriticalCVSS 9.3No exploitEPSS 1%

    sierrawireless · raven x ev-do firmwareJan 15, 2014

  • CVE-2017-15043
    36Monitor

    A vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware before 4.4.5 and GX450, ES450, RV50, RV50X,

    HighCVSS 8.8No exploitEPSS 4%

    sierrawireless · gx440 firmwareMay 4, 2018

  • CVE-2016-5067
    36Monitor

    Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Hayes AT command injection.

    HighCVSS 8.8No exploitEPSS 3%

    sierrawireless · aleos firmwareApr 9, 2017

  • CVE-2022-46649
    36Monitor

    Acemanager in ALEOS before version 4.16 allows a user with valid credentials to manipulate the IP logging operation to execute arbitrary she

    HighCVSS 8.8Proof of conceptEPSS 2%

    sierrawireless · aleosFeb 10, 2023

  • CVE-2019-11859
    36Monitor

    ALEOS SMS Handler Buffer Overflow

    HighCVSS 8.8No exploitEPSS 1%

    sierrawireless · aleosAug 21, 2020

  • CVE-2018-4066
    36Monitor

    An exploitable cross-site request forgery vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink ES450 FW 4.9.3.

    HighCVSS 8.8No exploitEPSS 1%

    sierrawireless · airlink es450 firmwareMay 6, 2019

  • CVE-2016-5071
    36Monitor

    Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 execute the management web application as root.

    HighCVSS 8.8No exploitEPSS 1%

    sierrawireless · aleos firmwareApr 9, 2017