PT-2017-8683 · Sierra Wireless · Sierra Wireless Gx 440

Publicado 2017-04-10 · Atualizado 2017-04-14 · CVE-2016-5065

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sierra Wireless GX 440 version 4.3.2

Description The issue allows for command injection through the Embedded Ace Set Task.cgi command.

Recommendations For version 4.3.2, consider restricting access to the Embedded Ace Set Task.cgi command until a patch is available.

Exploit

Correção

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

CVE-2016-5065

Produtos afetados

Sierra Wireless Gx 440

Referências · 3

• 🔥 https://carvesystems.com/sierra-wireless-2016-advisory.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2016-5065 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-5065 · Aviso do Fabricante