CVE-2016-5069

Critical

Published: 10/04/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use guessable session tokens, which are in the URL.

Guessable session tokens may allow attackers to hijack user sessions, leading to unauthorized access to the devices.

It is recommended to update the firmware to the latest version that eliminates the use of guessable session tokens.

Original NVD description (English source)

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use guessable session tokens, which are in the URL.