CVEvulnerability

CVE-2013-2820

10.0 HIGH Published 2014-01-15 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2014-01-15
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-287

Description

The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows remote attackers to reprogram the firmware via a replay attack using UDP ports 17336 and 17388.

Affected configurations

• sierrawireless raven x ev-do firmware 4221 4.0.11.003 • sierrawireless raven x ev-do firmware 4228 4.0.11.003 • sierrawireless airlink mp at\&t • sierrawireless airlink mp at\&t wifi • sierrawireless airlink mp bell • sierrawireless airlink mp bell wifi • sierrawireless airlink mp row • sierrawireless airlink mp row wifi • sierrawireless airlink mp sprint • sierrawireless airlink mp sprint wifi • sierrawireless airlink mp telus • sierrawireless airlink mp telus wifi • sierrawireless airlink mp verizon • sierrawireless airlink mp verizon wifi • sierrawireless pinpoint x • sierrawireless pinpoint xt • sierrawireless raven x • sierrawireless raven x ev-do • sierrawireless raven xe • sierrawireless raven xt

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References