VendorsSierra Wirelessgx_440all versions
Vulnerabilities

Sierra Wireless AirLink GX440

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

7CVEs
CVE-2016-5066
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 have weak passwords for admin, rauser, sconsole, and user.
Published 2017-04-10 · Modified
10.0EPSS 0.018
CVE-2016-5071
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 execute the management web application as root.
Published 2017-04-10 · Modified
10.0EPSS 0.017
CVE-2016-5065
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Embedded_Ace_Set_Task.cgi command injection.
Published 2017-04-10 · Modified
9.8EPSS 0.028
CVE-2016-5068
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 do not require authentication for Embedded_Ace_Get_Task.cgi requests.
Published 2017-04-10 · Modified
9.8EPSS 0.016
CVE-2016-5069
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use guessable session tokens, which are in the URL.
Published 2017-04-10 · Modified
9.8EPSS 0.014
CVE-2016-5070
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 store passwords in cleartext.
Published 2017-04-10 · Modified
9.8EPSS 0.013
CVE-2016-5067
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Hayes AT command injection.
Published 2017-04-10 · Modified
9.0EPSS 0.036