PatchTheCVEsierra wireless vulnerabilities
Recent CVEs affecting sierra wireless products. 4 tracked.
sierra wireless has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2017-06-30. Highest priority: CVE-2017-6044 (score 62/100).
- CVE-2017-6046 HIGH 7.5 UPGRADE MITIGATE An Insufficiently Protected Credentials issue was discovered in Sierra Wireless AirLink Raven XE, all versions
- CVE-2017-6044 CRITICAL 9.8 UPGRADE MITIGATE An Improper Authorization issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.
- CVE-2017-6042 HIGH 8.8 UPGRADE MITIGATE A Cross-Site Request Forgery issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4
- CVE-2015-2054 MEDIUM 4.3 MITIGATE MITIGATE CRLF injection vulnerability in export.cfg in the web-based administrative console for Sierra Wireless AirCard
FAQ
How do I fix sierra wireless vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sierra wireless being exploited right now?
None of the tracked sierra wireless CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sierra wireless CVE should I patch first?
CVE-2017-6044 currently ranks highest (62/100): An Improper Authorization issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0..