Vulnerability in Sierrawireless Airlink Mp At\&t
CVE-2013-2819
The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows remote attackers to install Trojan horse firmware by leveraging cleartext credentials in a crafted (1) update or (2) reprogramming action.
EPSS: 0.019 (77.1th percentile) — read the EPSS interpretation.
Affected products
- Sierrawireless Airlink_mp_at\&t
- Sierrawireless Airlink_mp_at\&t_wifi
- Sierrawireless Airlink_mp_bell
- Sierrawireless Airlink_mp_bell_wifi
- Sierrawireless Airlink_mp_row
- Sierrawireless Airlink_mp_row_wifi
- Sierrawireless Airlink_mp_sprint
- Sierrawireless Airlink_mp_sprint_wifi
- Sierrawireless Airlink_mp_telus
- Sierrawireless Airlink_mp_telus_wifi
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (x_refsource_CONFIRM, Vendor Advisory)
- ics-cert@hq.dhs.gov (US Government Resource, x_refsource_MISC)