CVE Catalog
CVE-2016-5070
CriticalSummary
Sierra Wireless GX 440 devices with ALEOS firmware version 4.3.2 store passwords in cleartext.
Risk Assessment
Storing passwords in cleartext exposes the organization to the risk of unauthorized access to systems and data.
Recommendation
It is recommended to update the firmware to the latest version that improves password storage security.
Other vulnerabilities in Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2
See all- CVE-2016-5071High
Sierra Wireless GX 440 devices with ALEOS firmware version 4.3.2 execute the management web application as root.
- CVE-2016-5067High
Sierra Wireless GX 440 devices with ALEOS firmware version 4.3.2 allow Hayes AT command injection.
- CVE-2016-5066Critical
Sierra Wireless GX 440 devices with ALEOS firmware version 4.3.2 have weak passwords for admin, rauser, sconsole, and user accounts.
Original NVD description (English source)
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 store passwords in cleartext.