Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Vendor: Sierra Wireless Clear all filters
TI-2023-14964 CVE-2023-31280 · GHSA-c3vh-vj4j-ph6x

Exposure of Sensitive Information to an Unauthorized Actor

Priority LOW 30

An AirVantage online Warranty Checker tool vulnerability could allow an attacker to perform bulk enumeration of IMEI and Serial Numbers pairs.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00376 Published 2024-12-20 No fix listed CWE-200
TI-2023-14963 CVE-2023-31279 · GHSA-pq62-7rf2-mhcm

Improper authentication in Sierra Wireless AirVantage, AirVantage-Capable Devices: All…

Priority LOW 36

The AirVantage platform is vulnerable to an unauthorized attacker registering previously unregistered devices on the AirVantage platform when the owner has not disabled the AirVantage Management Service on the devices or…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0042 Published 2024-12-20 No fix listed CWE-287
TI-2020-10748 CVE-2020-13712 · GHSA-8g3g-85w5-qrm6

MGOS Command Injection

Priority LOW 37

A command injection is possible through the user interface, allowing arbitrary command execution as the root user.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00587 Published 2024-12-20 Fixed in 3.15.1, 4.2.1 CWE-78
TI-2018-03029 CVE-2018-4063 · GHSA-96pr-35f4-cf4c

Unrestricted file upload in Sierra Wireless

Priority CRITICAL 97KEV

An exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.2726 Published 2019-05-06 No fix listed CWE-434
TI-2017-03954 CVE-2017-6044 · GHSA-5vxj-c9wj-5m6q

Improper authorization in Sierra Wireless AirLink Raven XE and XT

Priority MEDIUM 49

An Improper Authorization issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04264 Published 2017-06-30 No fix listed CWE-285
TI-2017-03952 CVE-2017-6042 · GHSA-wp73-m8wc-m2mm

Cross-site request forgery in Sierra Wireless AirLink Raven XE and XT

Priority LOW 39

A Cross-Site Request Forgery issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00641 Published 2017-06-30 No fix listed CWE-352