CVE-2016-5068

Critical

Published: 10/04/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Sierra Wireless GX 440 devices with ALEOS firmware version 4.3.2 do not require authentication for Embedded_Ace_Get_Task.cgi requests.

The lack of authentication may allow unauthorized users to access sensitive device functions, posing a security risk.

It is recommended to update the firmware to the latest version that enforces authentication for these requests.

Original NVD description (English source)

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 do not require authentication for Embedded_Ace_Get_Task.cgi requests.