Search
Find a vulnerability
Search criteria
1 vulnerability found for mp70e by sierrawireless
VAR-201805-0208
Vulnerability from variot - Updated: 2024-11-23 23:08A vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware before 4.4.5 and GX450, ES450, RV50, RV50X, MP70, and MP70E routers with firmware before 4.9 could allow an authenticated remote attacker to execute arbitrary code and gain full control of an affected system, including issuing commands with root privileges. This vulnerability is due to insufficient input validation on user-controlled input in an HTTP request to the targeted device. An attacker in possession of router login credentials could exploit this vulnerability by sending a crafted HTTP request to an affected system. plural Sierra Wireless Vulnerability related to input validation exists in the firmware of routers made by the manufacturer.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. SierraWirelessAirLinkGX400 and others are router products of SierraWireless Canada
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201805-0208",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "gx440",
"scope": "lt",
"trust": 1.0,
"vendor": "sierrawireless",
"version": "4.4.5"
},
{
"model": "rv50x",
"scope": "lt",
"trust": 1.0,
"vendor": "sierrawireless",
"version": "4.9"
},
{
"model": "rv50",
"scope": "lt",
"trust": 1.0,
"vendor": "sierrawireless",
"version": "4.9"
},
{
"model": "ls300",
"scope": "lt",
"trust": 1.0,
"vendor": "sierrawireless",
"version": "4.4.5"
},
{
"model": "gx400",
"scope": "lt",
"trust": 1.0,
"vendor": "sierrawireless",
"version": "4.4.5"
},
{
"model": "es440",
"scope": "lt",
"trust": 1.0,
"vendor": "sierrawireless",
"version": "4.4.5"
},
{
"model": "mp70",
"scope": "lt",
"trust": 1.0,
"vendor": "sierrawireless",
"version": "4.9"
},
{
"model": "mp70e",
"scope": "lt",
"trust": 1.0,
"vendor": "sierrawireless",
"version": "4.9"
},
{
"model": "es450",
"scope": "lt",
"trust": 1.0,
"vendor": "sierrawireless",
"version": "4.9"
},
{
"model": "gx450",
"scope": "lt",
"trust": 1.0,
"vendor": "sierrawireless",
"version": "4.9"
},
{
"model": "airlink es440",
"scope": "lt",
"trust": 0.8,
"vendor": "sierra",
"version": "4.4.5"
},
{
"model": "airlink es450",
"scope": "lt",
"trust": 0.8,
"vendor": "sierra",
"version": "4.9.3"
},
{
"model": "airlink gx400",
"scope": "lt",
"trust": 0.8,
"vendor": "sierra",
"version": "4.4.5"
},
{
"model": "airlink gx440",
"scope": "lt",
"trust": 0.8,
"vendor": "sierra",
"version": "4.4.5"
},
{
"model": "airlink gx450",
"scope": "lt",
"trust": 0.8,
"vendor": "sierra",
"version": "4.9.3"
},
{
"model": "airlink ls300",
"scope": "lt",
"trust": 0.8,
"vendor": "sierra",
"version": "4.4.5"
},
{
"model": "airlink mp70",
"scope": "lt",
"trust": 0.8,
"vendor": "sierra",
"version": "4.9"
},
{
"model": "airlink mp70e",
"scope": "lt",
"trust": 0.8,
"vendor": "sierra",
"version": "4.9"
},
{
"model": "airlink rv50",
"scope": "lt",
"trust": 0.8,
"vendor": "sierra",
"version": "4.9"
},
{
"model": "airlink rv50x",
"scope": "lt",
"trust": 0.8,
"vendor": "sierra",
"version": "4.9"
},
{
"model": "wireless airlink es440",
"scope": "lt",
"trust": 0.6,
"vendor": "sierra",
"version": "4.4.5"
},
{
"model": "wireless airlink ls300",
"scope": "lt",
"trust": 0.6,
"vendor": "sierra",
"version": "4.4.5"
},
{
"model": "wireless airlink gx450",
"scope": "lt",
"trust": 0.6,
"vendor": "sierra",
"version": "4.9"
},
{
"model": "wireless airlink es450",
"scope": "lt",
"trust": 0.6,
"vendor": "sierra",
"version": "4.9"
},
{
"model": "wireless airlink rv50",
"scope": "lt",
"trust": 0.6,
"vendor": "sierra",
"version": "4.9"
},
{
"model": "wireless airlink rv50x",
"scope": "lt",
"trust": 0.6,
"vendor": "sierra",
"version": "4.9"
},
{
"model": "wireless airlink mp70",
"scope": "lt",
"trust": 0.6,
"vendor": "sierra",
"version": "4.9"
},
{
"model": "wireless airlink mp70e",
"scope": "lt",
"trust": 0.6,
"vendor": "sierra",
"version": "4.9"
},
{
"model": "wireless airlink gx400",
"scope": "lt",
"trust": 0.6,
"vendor": "sierra",
"version": "4.4.5"
},
{
"model": "wireless airlink gx440",
"scope": "lt",
"trust": 0.6,
"vendor": "sierra",
"version": "4.4.5"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-09153"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-013383"
},
{
"db": "NVD",
"id": "CVE-2017-15043"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/h:sierra_wireless:airlink_es440",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:sierra_wireless:airlink_es450",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:sierra_wireless:airlink_gx400",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:sierra_wireless:airlink_gx440",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:sierra_wireless:airlink_gx450",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:sierra_wireless:airlink_ls300",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:sierra_wireless:mp70_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:sierra_wireless:mp70e_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:sierra_wireless:rv50_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:sierra_wireless:rv50x_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-013383"
}
]
},
"cve": "CVE-2017-15043",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 9.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 8.0,
"id": "CVE-2017-15043",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.9,
"vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CNVD-2018-09153",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 2.8,
"id": "CVE-2017-15043",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"trust": 1.8,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2017-15043",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2017-15043",
"trust": 0.8,
"value": "High"
},
{
"author": "CNVD",
"id": "CNVD-2018-09153",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201805-165",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "VULMON",
"id": "CVE-2017-15043",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-09153"
},
{
"db": "VULMON",
"id": "CVE-2017-15043"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-013383"
},
{
"db": "CNNVD",
"id": "CNNVD-201805-165"
},
{
"db": "NVD",
"id": "CVE-2017-15043"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "A vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware before 4.4.5 and GX450, ES450, RV50, RV50X, MP70, and MP70E routers with firmware before 4.9 could allow an authenticated remote attacker to execute arbitrary code and gain full control of an affected system, including issuing commands with root privileges. This vulnerability is due to insufficient input validation on user-controlled input in an HTTP request to the targeted device. An attacker in possession of router login credentials could exploit this vulnerability by sending a crafted HTTP request to an affected system. plural Sierra Wireless Vulnerability related to input validation exists in the firmware of routers made by the manufacturer.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. SierraWirelessAirLinkGX400 and others are router products of SierraWireless Canada",
"sources": [
{
"db": "NVD",
"id": "CVE-2017-15043"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-013383"
},
{
"db": "CNVD",
"id": "CNVD-2018-09153"
},
{
"db": "VULMON",
"id": "CVE-2017-15043"
}
],
"trust": 2.25
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2017-15043",
"trust": 3.1
},
{
"db": "JVNDB",
"id": "JVNDB-2017-013383",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2018-09153",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-201805-165",
"trust": 0.6
},
{
"db": "VULMON",
"id": "CVE-2017-15043",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-09153"
},
{
"db": "VULMON",
"id": "CVE-2017-15043"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-013383"
},
{
"db": "CNNVD",
"id": "CNNVD-201805-165"
},
{
"db": "NVD",
"id": "CVE-2017-15043"
}
]
},
"id": "VAR-201805-0208",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-09153"
}
],
"trust": 1.6
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-09153"
}
]
},
"last_update_date": "2024-11-23T23:08:44.102000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "SWI-PSA-2018-003: Technical Bulletin - Reaper",
"trust": 0.8,
"url": "https://source.sierrawireless.com/resources/airlink/software_reference_docs/technical-bulletin/swi-psa-2018-003-technical-bulletin-reaper/"
},
{
"title": "Patches for arbitrary code execution vulnerabilities in various SierraWireless products",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/128521"
},
{
"title": "Multiple Sierra Wireless Product security vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=79876"
},
{
"title": "Threatpost",
"trust": 0.1,
"url": "https://threatpost.com/sierra-wireless-patches-critical-vulns-in-hundreds-of-thousands-of-wireless-routers/131804/"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-09153"
},
{
"db": "VULMON",
"id": "CVE-2017-15043"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-013383"
},
{
"db": "CNNVD",
"id": "CNNVD-201805-165"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-20",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-013383"
},
{
"db": "NVD",
"id": "CVE-2017-15043"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.3,
"url": "https://source.sierrawireless.com/resources/airlink/software_reference_docs/technical-bulletin/swi-psa-2018-003-technical-bulletin-reaper/"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-15043"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2017-15043"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/20.html"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
},
{
"trust": 0.1,
"url": "https://threatpost.com/sierra-wireless-patches-critical-vulns-in-hundreds-of-thousands-of-wireless-routers/131804/"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-09153"
},
{
"db": "VULMON",
"id": "CVE-2017-15043"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-013383"
},
{
"db": "CNNVD",
"id": "CNNVD-201805-165"
},
{
"db": "NVD",
"id": "CVE-2017-15043"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2018-09153"
},
{
"db": "VULMON",
"id": "CVE-2017-15043"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-013383"
},
{
"db": "CNNVD",
"id": "CNNVD-201805-165"
},
{
"db": "NVD",
"id": "CVE-2017-15043"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-05-09T00:00:00",
"db": "CNVD",
"id": "CNVD-2018-09153"
},
{
"date": "2018-05-04T00:00:00",
"db": "VULMON",
"id": "CVE-2017-15043"
},
{
"date": "2018-06-29T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2017-013383"
},
{
"date": "2018-05-07T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201805-165"
},
{
"date": "2018-05-04T20:29:00.437000",
"db": "NVD",
"id": "CVE-2017-15043"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-05-09T00:00:00",
"db": "CNVD",
"id": "CNVD-2018-09153"
},
{
"date": "2018-06-13T00:00:00",
"db": "VULMON",
"id": "CVE-2017-15043"
},
{
"date": "2018-06-29T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2017-013383"
},
{
"date": "2018-05-07T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201805-165"
},
{
"date": "2024-11-21T03:13:59.653000",
"db": "NVD",
"id": "CVE-2017-15043"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201805-165"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "plural Sierra Wireless Vulnerability related to input confirmation in firmware of routers",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-013383"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "input validation",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201805-165"
}
],
"trust": 0.6
}
}