SierraWireless

Records56All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical15CVSS 9.0–10.0

CVSS high32CVSS 7.0–8.9

Exploited now

SierraWireless records in CISA KEV

TI-2018-03029 Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability CRITICAL 97KEV 2025-12-12

Components

Products in the NVD configurations · select one to filter the records

Aleos 30 records CRITICAL Airlink Es450 Firmware 12 records MEDIUM Aleos Firmware 7 records MEDIUM Airlink Mp At&t 2 records MEDIUM Airlink Mp At&t Wifi 2 records MEDIUM Airlink Mp Bell 2 records MEDIUM Airlink Mp Bell Wifi 2 records MEDIUM Airlink Mp Row 2 records MEDIUM

Records

7 records in Aleos Firmware · all components

TI-2016-04382 CVE-2016-5065 · GHSA-frjx-gpfq-xf63

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Embedded_Ace_Set_Task.cgi command injection.

MEDIUM 47

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Embedded_Ace_Set_Task.cgi command injection.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0266 Published 2017-04-10 No fix listed CWE-77

TI-2016-04383 CVE-2016-5066 · GHSA-6j4c-8497-9cm2

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 have weak passwords for admin, rauser, sconsole, and user.

MEDIUM 46

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 have weak passwords for admin, rauser, sconsole, and user.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01839 Published 2017-04-10 No fix listed CWE-255

TI-2016-04387 CVE-2016-5070 · GHSA-wr6x-223j-4rm4

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 store passwords in cleartext.

MEDIUM 45

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 store passwords in cleartext.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01342 Published 2017-04-10 No fix listed CWE-255

TI-2016-04386 CVE-2016-5069 · GHSA-3j66-8rrv-5m2g

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use guessable session tokens, which are in the URL.

MEDIUM 45

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use guessable session tokens, which are in the URL.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01342 Published 2017-04-10 No fix listed CWE-613

TI-2016-04385 CVE-2016-5068 · GHSA-c8rv-h68c-jvwr

Improper authentication in Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2

MEDIUM 45

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 do not require authentication for Embedded_Ace_Get_Task.cgi requests.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01551 Published 2017-04-10 No fix listed CWE-287

TI-2016-04384 CVE-2016-5067 · GHSA-gg6h-4p45-x3h7

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Hayes AT command injection.

MEDIUM 44

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Hayes AT command injection.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.03439 Published 2017-04-10 No fix listed CWE-77

TI-2016-04388 CVE-2016-5071 · GHSA-j4v3-45w4-p3w3

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 execute the management web application as root.

MEDIUM 42

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 execute the management web application as root.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01738 Published 2017-04-10 No fix listed CWE-264

Open these records in search →

Critical	15
High	32
Medium	8
Low	1
No CVSS	0