CVE-2016-5068: Critical severity sierra wireless aleos firmware vulnerability

Published Apr 10, 2017

Updated

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 do not require authentication for EmbeddedAceGetTask.cgi requests.

Affected Software

2 affected components

Sierrawireless Aleos Firmware=4.3.2

Sierrawireless Gx 440

Event History

Apr 10, 2017

CVE Published

via MITRE·03:00 AM

Data Sourced

via MITRE·03:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability CVE-2016-5068 about?

CVE-2016-5068 is a vulnerability in Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 that allows unauthorized access to Embedded_Ace_Get_Task.cgi requests without authentication.

Who is affected by CVE-2016-5068?

CVE-2016-5068 affects users of Sierra Wireless GX 440 devices running ALEOS firmware version 4.3.2.

What is the impact of CVE-2016-5068?

The impact of CVE-2016-5068 includes the potential for attackers to gain access to sensitive device configurations and data without proper authentication.

How can CVE-2016-5068 be resolved?

To resolve CVE-2016-5068, users should upgrade their ALEOS firmware to a version that addresses this vulnerability.

Is there a workaround for CVE-2016-5068?

There are no documented workarounds for CVE-2016-5068, so upgrading the firmware is recommended.