Sierra Wireless RV55 any version

Acemanager in ALEOS before version 4.16 allows a user with valid credentials to manipulate the IP logging operation to execute arbitrary shell commands on the device.

Improper input leads to DoS

Use of Hard-Coded Credentials

Cross-site scripting vulnerability in ACEManager

Use of hardcoded certificate and private key

Improper input leads to DoS

OpenNDS, as used in Sierra Wireless ALEOS before 4.17.0.12 and other products, allows remote attackers to cause a denial of service (NULL pointer dereference, daemon crash, and Captive Portal outage) via a GET request to /opennds_auth/ that lacks a custom query string parameter and client-token.

Improper input leads to DoS

Improper input leads to DoS

Acemanager in ALEOS before version 4.16 allows a user with valid credentials to reconfigure the device to expose the ACEManager credentials on the pre-login status page.