CVE Catalog
CVE-2016-5067
HighSummary
Sierra Wireless GX 440 devices with ALEOS firmware version 4.3.2 allow Hayes AT command injection.
Risk Assessment
AT command injection may lead to unauthorized access to the device and potential takeover.
Recommendation
It is recommended to update the firmware to the latest version to mitigate the risk associated with this vulnerability.
Other vulnerabilities in Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2
See all- CVE-2016-5071High
Sierra Wireless GX 440 devices with ALEOS firmware version 4.3.2 execute the management web application as root.
- CVE-2016-5070Critical
Sierra Wireless GX 440 devices with ALEOS firmware version 4.3.2 store passwords in cleartext.
- CVE-2016-5066Critical
Sierra Wireless GX 440 devices with ALEOS firmware version 4.3.2 have weak passwords for admin, rauser, sconsole, and user accounts.
Original NVD description (English source)
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Hayes AT command injection.