https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2017-6046.htmlhttps://patchthecve.com/cve/CVE-2017-6046.htmlWed, 17 Jun 2026 01:21:41 +0000HIGH 7.5: An Insufficiently Protected Credentials issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11. Sensitive information is insufficiently protected during transmission and vulnerable to sniffing, which could lead to inhttps://patchthecve.com/cve/CVE-2017-6044.htmlhttps://patchthecve.com/cve/CVE-2017-6044.htmlWed, 17 Jun 2026 01:21:41 +0000CRITICAL 9.8: An Improper Authorization issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11. Several files and directories can be accessed without authentication, which may allow a remote attacker to perform sensitive functionshttps://patchthecve.com/cve/CVE-2017-6042.htmlhttps://patchthecve.com/cve/CVE-2017-6042.htmlWed, 17 Jun 2026 01:21:41 +0000HIGH 8.8: A Cross-Site Request Forgery issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11. Affected devices do not verify if a request was intentionally sent by the logged-in user, which may allow an attacker to trick a clhttps://patchthecve.com/cve/CVE-2015-2054.htmlhttps://patchthecve.com/cve/CVE-2015-2054.htmlWed, 17 Jun 2026 00:23:31 +0000MEDIUM 4.3: CRLF injection vulnerability in export.cfg in the web-based administrative console for Sierra Wireless AirCard 760S, 762S, and 763S allows remote attackers to inject arbitrary headers via CRLF sequences in the save parameter.