CVE-2016-5071
HighSummary
Sierra Wireless GX 440 devices with ALEOS firmware version 4.3.2 execute the management web application as root.
Risk Assessment
Executing the management application as root poses a significant risk as it may allow attackers full access to the system.
Recommendation
It is recommended to update the ALEOS firmware to the latest version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2
See all- CVE-2016-5067High
Sierra Wireless GX 440 devices with ALEOS firmware version 4.3.2 allow Hayes AT command injection.
- CVE-2016-5070Critical
Sierra Wireless GX 440 devices with ALEOS firmware version 4.3.2 store passwords in cleartext.
- CVE-2016-5066Critical
Sierra Wireless GX 440 devices with ALEOS firmware version 4.3.2 have weak passwords for admin, rauser, sconsole, and user accounts.
Original NVD description (English source)
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 execute the management web application as root.