CVE-2017-6044: Critical severity sierra wireless airlink raven xe firmware vulnerability
An Improper Authorization issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11. Several files and directories can be accessed without authentication, which may allow a remote attacker to perform sensitive functions including arbitrary file upload, file download, and device reboot.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-6044?
CVE-2017-6044 has been classified as a high severity vulnerability due to improper authorization that allows unauthorized access.
How do I fix CVE-2017-6044?
To fix CVE-2017-6044, update the Sierra Wireless AirLink Raven XE to firmware version 4.0.14 or higher and the AirLink Raven XT to version 4.0.11 or higher.
What are the potential risks of CVE-2017-6044?
The risks of CVE-2017-6044 include unauthorized access to sensitive files and directories, allowing attackers to perform privileged actions.
Which versions of Sierra Wireless AirLink devices are affected by CVE-2017-6044?
CVE-2017-6044 affects all versions of Sierra Wireless AirLink Raven XE prior to 4.0.14 and AirLink Raven XT prior to 4.0.11.
Is there an exploit for CVE-2017-6044?
While specific exploitation details are not publicly disclosed, the vulnerability's nature indicates that it could be leveraged by remote attackers to exploit the affected devices.