Unscored severity · published Feb 23, 2015
CVE-2015-2054
CRLF injection vulnerability in export.cfg in the web-based administrative console for Sierra Wireless AirCard 760S, 762S, and 763S allows remote attackers to inject arbitrary…
–
CVSS
1%
EPSS
No
On KEV
Description
CRLF injection vulnerability in export.cfg in the web-based administrative console for Sierra Wireless AirCard 760S, 762S, and 763S allows remote attackers to inject arbitrary headers via CRLF sequences in the save parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 63% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SW
Sierra Wireless Aircard 760s · Sierra Wireless
All versions, or not specified · source: NVD
SW
Sierra Wireless Aircard 762s · Sierra Wireless
All versions, or not specified · source: NVD
SW
Sierra Wireless Aircard 763s · Sierra Wireless
All versions, or not specified · source: NVD