CVE-2013-2819
sierrawireless: no CVSS score yet. EPSS 1.9% chance of exploitation in the next 30 days.
The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows remote attackers to install Trojan horse firmware by leveraging cleartext credentials in a crafted (1) update or (2) reprogramming action.
- EPSS
- 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
- CWE
- CWE-255
- Published
- Modified
- Record from
- the NVD, synced
Affected
- sierrawireless:airlink_mp_at\&t
- sierrawireless:airlink_mp_at\&t_wifi
- sierrawireless:airlink_mp_bell
- sierrawireless:airlink_mp_bell_wifi
- sierrawireless:airlink_mp_row
- sierrawireless:airlink_mp_row_wifi
- sierrawireless:airlink_mp_sprint
- sierrawireless:airlink_mp_sprint_wifi
- sierrawireless:airlink_mp_telus
- sierrawireless:airlink_mp_telus_wifi
- sierrawireless:airlink_mp_verizon
- sierrawireless:airlink_mp_verizon_wifi
- sierrawireless:pinpoint_x
- sierrawireless:pinpoint_xt
- sierrawireless:raven_x
- sierrawireless:raven_x_ev-do
- sierrawireless:raven_x_ev-do_firmware
- sierrawireless:raven_xe
- sierrawireless:raven_xt
References
- http://ics-cert.us-cert.gov/advisories/ICSA-14-007-01A
- http://www.sierrawireless.com/resources/support/airlink/docs/raven%20security%20vulnerability%202014-01-10.pdf
- http://ics-cert.us-cert.gov/advisories/ICSA-14-007-01A
- http://www.sierrawireless.com/resources/support/airlink/docs/raven%20security%20vulnerability%202014-01-10.pdf