<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: airlink raven xe firmware</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2017-6046: An Insufficiently Protected Credentials issue was discovered in Sierra Wireless AirLink Raven XE, all versions</title><link>https://patchthecve.com/cve/CVE-2017-6046.html</link><guid>https://patchthecve.com/cve/CVE-2017-6046.html</guid><pubDate>Wed, 17 Jun 2026 01:21:41 +0000</pubDate><description>HIGH 7.5: An Insufficiently Protected Credentials issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11. Sensitive information is insufficiently protected during transmission and vulnerable to sniffing, which could lead to in</description></item><item><title>CVE-2017-6044: An Improper Authorization issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.</title><link>https://patchthecve.com/cve/CVE-2017-6044.html</link><guid>https://patchthecve.com/cve/CVE-2017-6044.html</guid><pubDate>Wed, 17 Jun 2026 01:21:41 +0000</pubDate><description>CRITICAL 9.8: An Improper Authorization issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11. Several files and directories can be accessed without authentication, which may allow a remote attacker to perform sensitive functions</description></item><item><title>CVE-2017-6042: A Cross-Site Request Forgery issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4</title><link>https://patchthecve.com/cve/CVE-2017-6042.html</link><guid>https://patchthecve.com/cve/CVE-2017-6042.html</guid><pubDate>Wed, 17 Jun 2026 01:21:41 +0000</pubDate><description>HIGH 8.8: A Cross-Site Request Forgery issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11. Affected devices do not verify if a request was intentionally sent by the logged-in user, which may allow an attacker to trick a cl</description></item></channel></rss>