Login Request a demo
SI
Vendor
Sierrawireless
38 products with CVEs on record
103
CVEs
1
On KEV
0
New 30D
Products
AL
ALEOS
sierrawireless
9.8
30 CVEs1 on KEV0 new
AE
Airlink Es450 Firmware
Sierrawireless
8.8
12 CVEs0 on KEV0 new
AF
Aleos Firmware
Sierrawireless
9.8
7 CVEs0 on KEV0 new
AM
Airlink MP At&t
Sierrawireless
–
2 CVEs0 on KEV0 new
AM
Airlink MP At&t Wifi
Sierrawireless
–
2 CVEs0 on KEV0 new
AM
Airlink MP Bell
Sierrawireless
–
2 CVEs0 on KEV0 new
AM
Airlink MP Bell Wifi
Sierrawireless
–
2 CVEs0 on KEV0 new
AM
Airlink MP Row
Sierrawireless
–
2 CVEs0 on KEV0 new
AM
Airlink MP Row Wifi
Sierrawireless
–
2 CVEs0 on KEV0 new
AM
Airlink MP Sprint
Sierrawireless
–
2 CVEs0 on KEV0 new
AM
Airlink MP Sprint Wifi
Sierrawireless
–
2 CVEs0 on KEV0 new
AM
Airlink MP Telus
Sierrawireless
–
2 CVEs0 on KEV0 new
AM
Airlink MP Telus Wifi
Sierrawireless
–
2 CVEs0 on KEV0 new
AM
Airlink MP Verizon
Sierrawireless
–
2 CVEs0 on KEV0 new
AM
Airlink MP Verizon Wifi
Sierrawireless
–
2 CVEs0 on KEV0 new
PX
Pinpoint X
Sierrawireless
–
2 CVEs0 on KEV0 new
PX
Pinpoint XT
Sierrawireless
–
2 CVEs0 on KEV0 new
RX
Raven X
Sierrawireless
–
2 CVEs0 on KEV0 new
RX
Raven X Ev-do
Sierrawireless
–
2 CVEs0 on KEV0 new
RX
Raven X Ev-do Firmware
Sierrawireless
–
2 CVEs0 on KEV0 new
RX
Raven XE
Sierrawireless
–
2 CVEs0 on KEV0 new
RX
Raven XT
Sierrawireless
–
2 CVEs0 on KEV0 new
AM
Airlink Mobility Manager
Sierrawireless
9.8
1 CVEs0 on KEV0 new
EF
Es440 Firmware
Sierrawireless
8.8
1 CVEs0 on KEV0 new
EF
Es450 Firmware
Sierrawireless
8.8
1 CVEs0 on KEV0 new
GF
Gx400 Firmware
Sierrawireless
8.8
1 CVEs0 on KEV0 new
GF
Gx440 Firmware
Sierrawireless
8.8
1 CVEs0 on KEV0 new
GF
Gx450 Firmware
Sierrawireless
8.8
1 CVEs0 on KEV0 new
LF
Ls300 Firmware
Sierrawireless
8.8
1 CVEs0 on KEV0 new
MG
Mgos
Sierrawireless
6.5
1 CVEs0 on KEV0 new
MB
Mobile Broadband Driver Package
Sierrawireless
7.8
1 CVEs0 on KEV0 new
MF
Mp70 Firmware
Sierrawireless
8.8
1 CVEs0 on KEV0 new
MF
Mp70e Firmware
Sierrawireless
8.8
1 CVEs0 on KEV0 new
RF
Rv50 Firmware
Sierrawireless
8.8
1 CVEs0 on KEV0 new
RF
Rv50x Firmware
Sierrawireless
8.8
1 CVEs0 on KEV0 new
SW
Sierra Wireless Em7345 Software
Sierrawireless
7.8
1 CVEs0 on KEV0 new
SW
Sierra Wireless Em7455 Software
Sierrawireless
7.8
1 CVEs0 on KEV0 new
SW
Sierra Wireless Location Sensor Driver
Sierrawireless
7.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2023-38321
AL
Aleos
Sierrawireless
7.5
1%
Dec 25OpenNDS, as used in Sierra Wireless ALEOS before 4.17.0.12 and other products, allows remote attackers to cause a denial of service (NULL pointer dereference, daemon crash, and…
CVE-2023-40465
AL
ALEOS
SierraWireless
5.5
0%
Dec 4Improper input leads to DoS
CVE-2023-40464
AL
ALEOS
SierraWireless
6.8
0%
Dec 4Use of hardcoded certificate and private key
CVE-2023-40463
AL
ALEOS
SierraWireless
7.2
1%
Dec 4Use of Hard-Coded Credentials
CVE-2023-40462
AL
ALEOS
SierraWireless
7.5
1%
Dec 4Improper input leads to DoS
CVE-2023-40461
AL
ALEOS
SierraWireless
4.8
0%
Dec 4Cross-site scripting vulnerability in ACEManager
CVE-2023-40460
AL
ALEOS
SierraWireless
5.4
0%
Dec 4Improper input leads to DoS
CVE-2023-40459
AL
ALEOS
SierraWireless
7.5
2%
Dec 4Improper input leads to DoS
CVE-2023-40458
AL
ALEOS
sierrawireless
7.5
1%
Nov 29AceManager DOS Vulnerability
CVE-2022-46650
AL
Aleos
Sierrawireless
4.9
12%
Feb 10Acemanager in ALEOS before version 4.16 allows a user with valid credentials to reconfigure the device to expose the ACEManager credentials on the pre-login status page
CVE-2022-46649
AL
Aleos
Sierrawireless
8.8
2%
Feb 10Acemanager in ALEOS before version 4.16 allows a user with valid credentials to manipulate the IP logging operation to execute arbitrary shell commands on the device
CVE-2020-11101
AM
Airlink Mobility Manager
Sierrawireless
9.8
1%
Dec 26Sierra Wireless AirLink Mobility Manager (AMM) before 2.17 mishandles sessions and thus an unauthenticated attacker can obtain a login session with administrator privileges
CVE-2019-11851
AL
Aleos
Sierrawireless
9.8
2%
Dec 26The ACENet service in Sierra Wireless ALEOS before 4.4.9, 4.5.x through 4.9.x before 4.9.5, and 4.10.x through 4.13.x before 4.14.0 allows remote attackers to execute arbitrary…
CVE-2019-13988
MG
Mgos
Sierrawireless
6.5
0%
Dec 26Sierra Wireless MGOS before 3.15.2 and 4.x before 4.3 allows attackers to read log files via a Direct Request (aka Forced Browsing)
CVE-2020-8782
AL
Aleos
Sierrawireless
9.8
2%
Oct 6Unauthenticated RPC server on ALEOS before 4.4.9, 4.9.5, and 4.14.0 allows remote code execution
CVE-2020-8781
AL
Aleos
Sierrawireless
7.8
0%
Oct 6Lack of input sanitization in UpdateRebootMgr service of ALEOS 4.11 and later allow an escalation to root from a low-privilege process
CVE-2019-11862
AL
Aleos
Sierrawireless
8.4
1%
Aug 21The SSH service on ALEOS before 4.12.0, 4.9.5, 4.4.9 allows traffic proxying
CVE-2019-11859
AL
Aleos
Sierrawireless
8.8
2%
Aug 21A buffer overflow exists in the SMS handler API of ALEOS before 4.13.0, 4.9.5, 4.9.4 that may allow code execution as root
CVE-2019-11858
AL
Aleos
Sierrawireless
7.2
1%
Aug 21Multiple buffer overflow vulnerabilities exist in the AceManager Web API of ALEOS before 4.13.0, 4.9.5, and 4.4.9
CVE-2019-11857
AL
Aleos
Sierrawireless
4.9
2%
Aug 21Lack of input sanitization in AceManager of ALEOS before 4.12.0, 4.9.5 and 4.4.9 allows disclosure of sensitive system information
CVE-2019-11856
AL
Aleos
Sierrawireless
3.8
1%
Aug 21A nonce reuse vulnerability exists in the ACEView service of ALEOS before 4.13.0, 4.9.5, and 4.4.9 allowing message replay
CVE-2019-11855
AL
Aleos
Sierrawireless
9.8
1%
Aug 21An RPC server is enabled by default on the gateway's LAN of ALEOS before 4.12.0, 4.9.5, and 4.4.9
CVE-2019-11853
AL
Aleos
Sierrawireless
7.2
1%
Aug 21Several potential command injections vulnerabilities exist in the AT command interface of ALEOS before 4.11.0, and 4.9.4
CVE-2019-11852
AL
Aleos
Sierrawireless
9.1
1%
Aug 21An out-of-bounds reads vulnerability exists in the ACEView Service of ALEOS before 4.13.0, 4.9.5, and 4.4.9
CVE-2019-11850
AL
Aleos
Sierrawireless
6.7
0%
Aug 21A stack overflow vulnerabiltity exist in the AT command interface of ALEOS before 4.11.0
CVE-2019-11849
AL
Aleos
Sierrawireless
6.7
0%
Aug 21A stack overflow vulnerabiltity exists in the AT command APIs of ALEOS before 4.11.0
CVE-2019-11848
AL
Aleos
Sierrawireless
7.2
1%
Aug 21An API abuse vulnerability exists in the AT command API of ALEOS before 4.13.0, 4.9.5, 4.4.9 due to lack of length checking when handling certain user-provided values
CVE-2019-11847
AL
Aleos
Sierrawireless
7.8
0%
Aug 21An improper privilege management vulnerabitlity exists in ALEOS before 4.11.0, 4.9.4 and 4.4.9
CVE-2020-8948
MB
Mobile Broadband Driver Package
Sierrawireless
7.8
0%
Apr 15The Sierra Wireless Windows Mobile Broadband Driver Packages (MBDP) before build 5043 allows an unprivileged user to overwrite arbitrary files in arbitrary folders using hard…
CVE-2018-4064
AE
Airlink Es450 Firmware
Sierrawireless
7.1
14%
Oct 31An exploitable unverified password change vulnerability exists in the ACEManager upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3
CVE-2018-4073
AE
Airlink Es450 Firmware
Sierrawireless
8.8
26%
May 6An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3
CVE-2018-4072
AE
Airlink Es450 Firmware
Sierrawireless
8.8
26%
May 6An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3
CVE-2018-4071
AE
Airlink Es450 Firmware
Sierrawireless
8.8
18%
May 6An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3
CVE-2018-4070
AE
Airlink Es450 Firmware
Sierrawireless
8.8
18%
May 6An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3
CVE-2018-4067
AE
Airlink Es450 Firmware
Sierrawireless
6.5
4%
May 6An exploitable information disclosure vulnerability exists in the ACEManager template_load.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3
CVE-2018-4066
AE
Airlink Es450 Firmware
Sierrawireless
8.8
2%
May 6An exploitable cross-site request forgery vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink ES450 FW 4.9.3
CVE-2018-4065
AE
Airlink Es450 Firmware
Sierrawireless
6.1
5%
May 6An exploitable cross-site scripting vulnerability exists in the ACEManager ping_result.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3
CVE-2018-4062
AE
Airlink Es450 Firmware
Sierrawireless
8.1
5%
May 6A hard-coded credentials vulnerability exists in the snmpd function of the Sierra Wireless AirLink ES450 FW 4.9.3
CVE-2018-4063
In wildKEV
AL
Aleos
Sierrawireless
8.8
27%
May 6Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability
CVE-2018-4069
AE
Airlink Es450 Firmware
Sierrawireless
7.5
4%
May 6An information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLink ES450 FW 4.9.3
CVE-2018-4068
AE
Airlink Es450 Firmware
Sierrawireless
5.3
11%
May 6An exploitable information disclosure vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink ES450 FW 4.9.3
CVE-2018-4061
AE
Airlink Es450 Firmware
Sierrawireless
8.8
19%
May 6An exploitable command injection vulnerability exists in the ACEManager iplogging.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3
CVE-2018-10251
AL
Aleos
Sierrawireless
9.8
4%
May 4A vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware before 4.4.7 and GX450, ES450, RV50, RV50X, MP70, and MP70E routers with firmware…
CVE-2017-15043
RF
Rv50 Firmware
Sierrawireless
8.8
4%
May 4A vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware before 4.4.5 and GX450, ES450, RV50, RV50X, MP70, and MP70E routers with firmware…
CVE-2017-9247
SW
Sierra Wireless Em7345 Software
Sierrawireless
7.8
0%
Aug 2Multiple unquoted service path vulnerabilities in Sierra Wireless Windows Mobile Broadband Driver Package (MBDP) with build ID < 4657 allows local users to launch processes with…
CVE-2016-5071
AF
Aleos Firmware
Sierrawireless
8.8
2%
Apr 10Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 execute the management web application as root
CVE-2016-5070
AF
Aleos Firmware
Sierrawireless
9.8
1%
Apr 10Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 store passwords in cleartext
CVE-2016-5069
AF
Aleos Firmware
Sierrawireless
9.8
1%
Apr 10Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use guessable session tokens, which are in the URL
CVE-2016-5068
AF
Aleos Firmware
Sierrawireless
9.8
2%
Apr 10Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 do not require authentication for Embedded_Ace_Get_Task.cgi requests
CVE-2016-5067
AF
Aleos Firmware
Sierrawireless
8.8
3%
Apr 10Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Hayes AT command injection
CVE-2016-5066
AF
Aleos Firmware
Sierrawireless
9.8
2%
Apr 10Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 have weak passwords for admin, rauser, sconsole, and user
CVE-2016-5065
AF
Aleos Firmware
Sierrawireless
9.8
3%
Apr 10Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Embedded_Ace_Set_Task.cgi command injection
CVE-2015-6479
AL
Aleos
Sierrawireless
4.3
2%
Apr 21ACEmanager in Sierra Wireless ALEOS 4.4.2 and earlier on ES440, ES450, GX400, GX440, GX450, and LS300 devices allows remote attackers to read the filteredlogs.txt file, and…
CVE-2015-2897
AL
Aleos
Sierrawireless
–
2%
Aug 8Sierra Wireless ALEOS before 4.4.2 on AirLink ES, GX, and LS devices has hardcoded root accounts, which makes it easier for remote attackers to obtain administrative access via a…
CVE-2013-2820
AM
Airlink MP Verizon Wifi
Sierrawireless
–
4%
Jan 15The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows remote attackers to reprogram the firmware via a replay attack using UDP ports 17336…
CVE-2013-2819
AM
Airlink MP Row
Sierrawireless
–
2%
Jan 15The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows remote attackers to install Trojan horse firmware by leveraging cleartext credentials…