CVE-2015-2897: Infoleak
Published Aug 8, 2015
·Updated
Sierra Wireless ALEOS before 4.4.2 on AirLink ES, GX, and LS devices has hardcoded root accounts, which makes it easier for remote attackers to obtain administrative access via a (1) SSH or (2) TELNET session.
Affected Software
6 affected components
Sierrawireless Aleos<=4.4.1
Sierrawireless Airlink Es440
Sierrawireless Airlink Es450
Sierrawireless Airlink Gx440
Sierrawireless Airlink Gx450
Sierrawireless Airlink Ls300
Event History
Aug 8, 2015
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-2897?
CVE-2015-2897 is considered a high severity vulnerability due to the presence of hardcoded root accounts that pose a significant security risk.
2
How do I fix CVE-2015-2897?
To fix CVE-2015-2897, update your Sierra Wireless ALEOS software to version 4.4.2 or later.
3
Which devices are affected by CVE-2015-2897?
CVE-2015-2897 affects Sierra Wireless ALEOS versions prior to 4.4.2 on AirLink ES, GX, and LS devices.
4
What protocols are exploited in CVE-2015-2897?
CVE-2015-2897 can be exploited through SSH and TELNET protocols.
5
What impact does CVE-2015-2897 have on security?
CVE-2015-2897 allows remote attackers to gain unauthorized administrative access to the affected devices.