İçeriğe atla
Noroxi

SierraWireless kayıtları

sierrawireless üreticisine ait 56 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
1 · %1,8
Silahlaştırılmış
1 · %1,8
Pre-auth RCE
4
Düzeltme kaydı olan
%1,8
Yayından KEV’e ortanca
2412 gün

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 22
  6. 23

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

56 kayıt
  • CVE-2018-4063
    73Bu hafta

    An exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %27

    sierrawireless · aleos6 May 2019

  • CVE-2018-4072
    43Planlayın

    An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sierra Wireless AirLink

    YüksekCVSS 8,8İstismar yokEPSS %26

    sierrawireless · airlink es450 firmware6 May 2019

  • CVE-2018-4073
    43Planlayın

    An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sierra Wireless AirLink

    YüksekCVSS 8,8İstismar yokEPSS %26

    sierrawireless · airlink es450 firmware6 May 2019

  • CVE-2018-4061
    41Planlayın

    An exploitable command injection vulnerability exists in the ACEManager iplogging.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.

    YüksekCVSS 8,8İstismar yokEPSS %19

    sierrawireless · airlink es450 firmware6 May 2019

  • CVE-2013-2820
    41Planlayın

    The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows remote attackers to reprogram the firmware via

    KritikCVSS 10,0İstismar yokEPSS %4

    sierrawireless · raven x ev-do firmware15 Oca 2014

  • CVE-2015-2897
    41Planlayın

    Sierra Wireless ALEOS before 4.4.2 on AirLink ES, GX, and LS devices has hardcoded root accounts, which makes it easier for remote attackers

    KritikCVSS 10,0İstismar yokEPSS %2

    sierrawireless · aleos7 Ağu 2015

  • CVE-2018-4071
    40Planlayın

    An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Sierra Wireless AirLin

    YüksekCVSS 8,8İstismar yokEPSS %18

    sierrawireless · airlink es450 firmware6 May 2019

  • CVE-2018-4070
    40Planlayın

    An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Sierra Wireless AirLin

    YüksekCVSS 8,8İstismar yokEPSS %18

    sierrawireless · airlink es450 firmware6 May 2019

  • CVE-2018-10251
    40Planlayın

    A vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware before 4.4.7 and GX450, ES450, RV50, RV50X,

    KritikCVSS 9,8İstismar yokEPSS %4

    sierrawireless · aleos4 May 2018

  • CVE-2016-5065
    40Planlayın

    Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Embedded_Ace_Set_Task.cgi command injection.

    KritikCVSS 9,8İstismar yokEPSS %3

    sierrawireless · aleos firmware9 Nis 2017

  • CVE-2016-5066
    40Planlayın

    Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 have weak passwords for admin, rauser, sconsole, and user.

    KritikCVSS 9,8İstismar yokEPSS %2

    sierrawireless · aleos firmware9 Nis 2017

  • CVE-2020-8782
    40Planlayın

    ALEOS LAN-Side RPC Service Remote Code Execution

    KritikCVSS 9,8İstismar yokEPSS %2

    sierrawireless · aleos6 Eki 2020

  • CVE-2019-11851
    40Planlayın

    The ACENet service in Sierra Wireless ALEOS before 4.4.9, 4.5.x through 4.9.x before 4.9.5, and 4.10.x through 4.13.x before 4.14.0 allows r

    KritikCVSS 9,8İstismar yokEPSS %2

    sierrawireless · aleos26 Ara 2022

  • CVE-2016-5068
    39İzleyin

    Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 do not require authentication for Embedded_Ace_Get_Task.cgi requests.

    KritikCVSS 9,8İstismar yokEPSS %2

    sierrawireless · aleos firmware9 Nis 2017

  • CVE-2016-5069
    39İzleyin

    Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use guessable session tokens, which are in the URL.

    KritikCVSS 9,8İstismar yokEPSS %1

    sierrawireless · aleos firmware9 Nis 2017

  • CVE-2016-5070
    39İzleyin

    Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 store passwords in cleartext.

    KritikCVSS 9,8İstismar yokEPSS %1

    sierrawireless · aleos firmware9 Nis 2017

  • CVE-2019-11855
    39İzleyin

    ALEOS LAN-Side RPC Server

    KritikCVSS 9,8İstismar yokEPSS %1

    sierrawireless · aleos21 Ağu 2020

  • CVE-2020-11101
    39İzleyin

    Sierra Wireless AirLink Mobility Manager (AMM) before 2.17 mishandles sessions and thus an unauthenticated attacker can obtain a login sessi

    KritikCVSS 9,8İstismar yokEPSS %1

    sierrawireless · airlink mobility manager26 Ara 2022

  • CVE-2013-2819
    38İzleyin

    The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows remote attackers to install Trojan horse firmwa

    KritikCVSS 9,3İstismar yokEPSS %2

    sierrawireless · raven x ev-do firmware15 Oca 2014

  • CVE-2017-15043
    36İzleyin

    A vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware before 4.4.5 and GX450, ES450, RV50, RV50X,

    YüksekCVSS 8,8İstismar yokEPSS %4

    sierrawireless · gx440 firmware4 May 2018

  • CVE-2016-5067
    36İzleyin

    Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Hayes AT command injection.

    YüksekCVSS 8,8İstismar yokEPSS %4

    sierrawireless · aleos firmware9 Nis 2017

  • CVE-2022-46649
    36İzleyin

    Acemanager in ALEOS before version 4.16 allows a user with valid credentials to manipulate the IP logging operation to execute arbitrary she

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    sierrawireless · aleos10 Şub 2023

  • CVE-2019-11859
    36İzleyin

    ALEOS SMS Handler Buffer Overflow

    YüksekCVSS 8,8İstismar yokEPSS %2

    sierrawireless · aleos21 Ağu 2020

  • CVE-2018-4066
    36İzleyin

    An exploitable cross-site request forgery vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink ES450 FW 4.9.3.

    YüksekCVSS 8,8İstismar yokEPSS %2

    sierrawireless · airlink es450 firmware6 May 2019

  • CVE-2016-5071
    36İzleyin

    Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 execute the management web application as root.

    YüksekCVSS 8,8İstismar yokEPSS %2

    sierrawireless · aleos firmware9 Nis 2017