CVE-2019-13988: Medium severity sierra wireless mgos vulnerability
Published Dec 26, 2022
·Updated
Sierra Wireless MGOS before 3.15.2 and 4.x before 4.3 allows attackers to read log files via a Direct Request (aka Forced Browsing).
Affected Software
8 affected components
Sierrawireless Mgos<4.3
Sierrawireless Airlink Mg90
Sierrawireless Mgos<3.15.2
Sierrawireless Airlink Omg2000
All of the following
Sierrawireless Mgos<4.3
Sierrawireless Airlink Mg90
All of the following
Sierrawireless Mgos<3.15.2
Sierrawireless Airlink Omg2000
Event History
Dec 26, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2019-13988?
CVE-2019-13988 is a vulnerability in Sierra Wireless MGOS before 3.15.2 and 4.x before 4.3 that allows attackers to read log files via a Direct Request (aka Forced Browsing).
2
How does CVE-2019-13988 affect Sierra Wireless MGOS?
CVE-2019-13988 affects Sierra Wireless MGOS versions before 3.15.2 and 4.x before 4.3.
3
What is the severity of CVE-2019-13988?
The severity of CVE-2019-13988 is medium, with a CVSS score of 6.5.
4
How can attackers exploit CVE-2019-13988?
Attackers can exploit CVE-2019-13988 by performing a Direct Request (Forced Browsing) to read log files.
5
How can I fix CVE-2019-13988?
To fix CVE-2019-13988, it is recommended to update Sierra Wireless MGOS to version 3.15.2 or 4.3.