Vulnerabilities > CVE-2015-6479 - Unspecified vulnerability in Sierrawireless Aleos

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

NONE

Availability impact

NONE

network

sierrawireless

NVD

Published: 2016-04-21

Updated: 2021-06-17

Summary

ACEmanager in Sierra Wireless ALEOS 4.4.2 and earlier on ES440, ES450, GX400, GX440, GX450, and LS300 devices allows remote attackers to read the filteredlogs.txt file, and consequently discover potentially sensitive boot-sequence information, via unspecified vectors.

Vulnerable Configurations

Part	Description	Count
OS	Sierrawireless Sierrawireless Aleos 4.3.0 Sierrawireless Aleos 4.3.1 Sierrawireless Aleos 4.3.2 Sierrawireless Aleos 4.3.3 Sierrawireless Aleos 4.3.4 Sierrawireless Aleos 4.3.5 Sierrawireless Aleos 4.3.6 Sierrawireless Aleos 4.4.0 Sierrawireless Aleos 4.4.1 Sierrawireless Aleos 4.4.2	10
Hardware	Sierrawireless Sierrawireless Es440 - Sierrawireless Es450 - Sierrawireless Gx400 - Sierrawireless Gx440 - Sierrawireless Gx450 - Sierrawireless Ls300 -	6

References

https://ics-cert.us-cert.gov/advisories/ICSA-16-105-01