CVE-2016-5066
CriticalSummary
Sierra Wireless GX 440 devices with ALEOS firmware version 4.3.2 have weak passwords for admin, rauser, sconsole, and user accounts.
Risk Assessment
Weak passwords may lead to unauthorized access to the devices, posing a serious security threat to the network.
Recommendation
It is recommended to change the default passwords to stronger ones and implement a password management policy.
Other vulnerabilities in Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2
See all- CVE-2016-5071High
Sierra Wireless GX 440 devices with ALEOS firmware version 4.3.2 execute the management web application as root.
- CVE-2016-5067High
Sierra Wireless GX 440 devices with ALEOS firmware version 4.3.2 allow Hayes AT command injection.
- CVE-2016-5070Critical
Sierra Wireless GX 440 devices with ALEOS firmware version 4.3.2 store passwords in cleartext.
Original NVD description (English source)
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 have weak passwords for admin, rauser, sconsole, and user.