CVE-2017-6044
CriticalSummary
An Improper Authorization issue was discovered in Sierra Wireless AirLink Raven XE (all versions prior to 4.0.14) and AirLink Raven XT (all versions prior to 4.0.11). Several files and directories can be accessed without authentication, which may allow a remote attacker to perform sensitive functions including arbitrary file upload, file download, and device reboot.
Risk Assessment
The risk to the organization involves the potential for remote control over the device, which could lead to data leakage or disruption of system operations.
Recommendation
It is recommended to update the devices to version 4.0.14 for Raven XE and 4.0.11 for Raven XT to mitigate this issue.
Original NVD description (English source)
An Improper Authorization issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11. Several files and directories can be accessed without authentication, which may allow a remote attacker to perform sensitive functions including arbitrary file upload, file download, and device reboot.