CVE-2016-5069: Critical severity sierra wireless aleos firmware vulnerability
Published Apr 10, 2017
·Updated
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use guessable session tokens, which are in the URL.
Affected Software
2 affected components
Sierrawireless Aleos Firmware=4.3.2
Sierrawireless Gx 440
Event History
Apr 10, 2017
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2016-5069?
The severity of CVE-2016-5069 is classified as medium due to the potential for unauthorized access via guessable session tokens.
2
How do I fix CVE-2016-5069?
To fix CVE-2016-5069, update the Sierra Wireless GX 440 devices to a firmware version that does not utilize guessable session tokens.
3
What type of devices are affected by CVE-2016-5069?
CVE-2016-5069 affects Sierra Wireless GX 440 devices running ALEOS firmware version 4.3.2.
4
What are the implications of CVE-2016-5069?
The implications of CVE-2016-5069 include the risk of session hijacking due to easily guessable session tokens in URLs.
5
Is the ALEOS firmware 4.3.2 the only version vulnerable to CVE-2016-5069?
Yes, ALEOS firmware version 4.3.2 is specifically identified as the vulnerable version associated with CVE-2016-5069.