CVEvulnerability
CVE-2013-2819
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-01-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-255
Description
The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows remote attackers to install Trojan horse firmware by leveraging cleartext credentials in a crafted (1) update or (2) reprogramming action.
Affected configurations
• sierrawireless raven x ev-do firmware 4221 4.0.11.003
• sierrawireless raven x ev-do firmware 4228 4.0.11.003
• sierrawireless airlink mp at\&t
• sierrawireless airlink mp at\&t wifi
• sierrawireless airlink mp bell
• sierrawireless airlink mp bell wifi
• sierrawireless airlink mp row
• sierrawireless airlink mp row wifi
• sierrawireless airlink mp sprint
• sierrawireless airlink mp sprint wifi
• sierrawireless airlink mp telus
• sierrawireless airlink mp telus wifi
• sierrawireless airlink mp verizon
• sierrawireless airlink mp verizon wifi
• sierrawireless pinpoint x
• sierrawireless pinpoint xt
• sierrawireless raven x
• sierrawireless raven x ev-do
• sierrawireless raven xe
• sierrawireless raven xt
Related
Weakness · not in database (1)
References
- http://ics-cert.us-cert.gov/advisories/ICSA-14-007-01A US Government Resource
- http://www.sierrawireless.com/resources/support/airlink/docs/raven%20security%20vulnerability%202014-01-10.pdf Vendor Advisory
- http://ics-cert.us-cert.gov/advisories/ICSA-14-007-01A US Government Resource
- http://www.sierrawireless.com/resources/support/airlink/docs/raven%20security%20vulnerability%202014-01-10.pdf Vendor Advisory