Login Request a demo
AF
Product
Aleos Firmware
by Sierrawireless · last CVE Apr 10, 2017
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 5High 2Medium 0Low 0
Severity
All severities7Critical5High2Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Aleos Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-5070
9.8
1%
Apr 10
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 store passwords in cleartext
Affected: 4.3.2
CVE-2016-5069
9.8
1%
Apr 10
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use guessable session tokens, which are in the URL
Affected: 4.3.2
CVE-2016-5068
9.8
2%
Apr 10
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 do not require authentication for Embedded_Ace_Get_Task.cgi requests
Affected: 4.3.2
CVE-2016-5066
9.8
2%
Apr 10
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 have weak passwords for admin, rauser, sconsole, and user
Affected: 4.3.2
CVE-2016-5065
9.8
3%
Apr 10
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Embedded_Ace_Set_Task.cgi command injection
Affected: 4.3.2
CVE-2016-5071
8.8
2%
Apr 10
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 execute the management web application as root
Affected: 4.3.2
CVE-2016-5067
8.8
3%
Apr 10
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Hayes AT command injection
Affected: 4.3.2
Showing 7