HIGH🇵🇱 Wersja polska

CVE-2015-2897

CVSS 10.0v2.0pub. 2015-08-08upd. 2026-05-06

Sierra Wireless ALEOS before 4.4.2 on AirLink ES, GX, and LS devices has hardcoded root accounts, which makes it easier for remote attackers to obtain administrative access via a (1) SSH or (2) TELNET session.

CVSS Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Sierrawireless Airlink Es440

    HW
    Sierrawireless
    wszystkie wersje

  • Sierrawireless Airlink Es450

    HW
    Sierrawireless
    wszystkie wersje

  • Sierrawireless Airlink Gx440

    HW
    Sierrawireless
    wszystkie wersje

  • Sierrawireless Airlink Gx450

    HW
    Sierrawireless
    wszystkie wersje

  • Sierrawireless Airlink Ls300

    HW
    Sierrawireless
    wszystkie wersje

  • Sierrawireless Aleos

    APP
    Sierrawireless
    ≤ 4.4.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2019-11851CRITICAL9.8ten sam produkt

The ACENet service in Sierra Wireless ALEOS before 4.4.9, 4.5.x through 4.9.x before 4.9.5, and 4.10.x through...

CVE-2019-11857CRITICAL9.1ten sam produkt

Lack of input sanitization in AceManager of ALEOS before 4.12.0, 4.9.5 and 4.4.9 allows disclosure of sensitiv...

CVE-2018-10251CRITICAL9.8ten sam produkt

A vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware before 4.4.7 a...

CVE-2018-4063HIGH8.8⚠ KEVten sam produkt

An exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless A...

CVE-2023-38321HIGH7.5ten sam produkt

OpenNDS, as used in Sierra Wireless ALEOS before 4.17.0.12 and other products, allows remote attackers to caus...