PT-2017-8683 · Sierra Wireless · Sierra Wireless Gx 440

Published 2017-04-10 · Updated 2017-04-14 · CVE-2016-5065

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sierra Wireless GX 440 version 4.3.2

Description The issue allows for command injection through the Embedded Ace Set Task.cgi command.

Recommendations For version 4.3.2, consider restricting access to the Embedded Ace Set Task.cgi command until a patch is available.

Exploit

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2016-5065

Affected Products

Sierra Wireless Gx 440

References · 3

• 🔥 https://carvesystems.com/sierra-wireless-2016-advisory.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2016-5065 · Security Note
• https://osv.dev/vulnerability/CVE-2016-5065 · Vendor Advisory