Auth bypass in Sierrawireless Airlink Mp At\&t
CVE-2013-2820
The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows remote attackers to reprogram the firmware via a replay attack using UDP ports 17336 and 17388.
Vulnerability class: Broken Authentication
EPSS: 0.039 (89.2th percentile) — read the EPSS interpretation.
Affected products
- Sierrawireless Airlink_mp_at\&t
- Sierrawireless Airlink_mp_at\&t_wifi
- Sierrawireless Airlink_mp_bell
- Sierrawireless Airlink_mp_bell_wifi
- Sierrawireless Airlink_mp_row
- Sierrawireless Airlink_mp_row_wifi
- Sierrawireless Airlink_mp_sprint
- Sierrawireless Airlink_mp_sprint_wifi
- Sierrawireless Airlink_mp_telus
- Sierrawireless Airlink_mp_telus_wifi
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (x_refsource_CONFIRM, Vendor Advisory)
- ics-cert@hq.dhs.gov (US Government Resource, x_refsource_MISC)