{"cve":"CVE-2013-2819","nvd":{"published":"2014-01-15T16:08:13.017","modified":"2026-06-16T23:54:00.923","status":"Modified","description":"The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows remote attackers to install Trojan horse firmware by leveraging cleartext credentials in a crafted (1) update or (2) reprogramming action.","cvss_v4":null,"cvss_v3":null,"cwes":["CWE-255"],"references":["http://ics-cert.us-cert.gov/advisories/ICSA-14-007-01A","http://www.sierrawireless.com/resources/support/airlink/docs/raven%20security%20vulnerability%202014-01-10.pdf","http://ics-cert.us-cert.gov/advisories/ICSA-14-007-01A","http://www.sierrawireless.com/resources/support/airlink/docs/raven%20security%20vulnerability%202014-01-10.pdf"],"products":["sierrawireless:airlink_mp_at\\&t","sierrawireless:airlink_mp_at\\&t_wifi","sierrawireless:airlink_mp_bell","sierrawireless:airlink_mp_bell_wifi","sierrawireless:airlink_mp_row","sierrawireless:airlink_mp_row_wifi","sierrawireless:airlink_mp_sprint","sierrawireless:airlink_mp_sprint_wifi","sierrawireless:airlink_mp_telus","sierrawireless:airlink_mp_telus_wifi","sierrawireless:airlink_mp_verizon","sierrawireless:airlink_mp_verizon_wifi","sierrawireless:pinpoint_x","sierrawireless:pinpoint_xt","sierrawireless:raven_x","sierrawireless:raven_x_ev-do","sierrawireless:raven_x_ev-do_firmware","sierrawireless:raven_xe","sierrawireless:raven_xt"],"source":"nvd","synced_at":"2026-10-19T20:30:15.895642412+00:00"},"epss":{"cve":"CVE-2013-2819","score":0.01866,"percentile":0.79297,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}