Описание
ACEmanager in Sierra Wireless ALEOS 4.4.2 and earlier on ES440, ES450, GX400, GX440, GX450, and LS300 devices allows remote attackers to read the filteredlogs.txt file, and consequently discover potentially sensitive boot-sequence information, via unspecified vectors.
Комментарий
CWE-538: File and Directory Information Exposure
Ссылки
- Third Party AdvisoryUS Government Resource
- Third Party AdvisoryUS Government Resource
Уязвимые конфигурации
Конфигурация 1Версия до 4.4.2 (включая)
Одновременно
cpe:2.3:o:sierrawireless:aleos:*:*:*:*:*:*:*:*
Одно из
cpe:2.3:h:sierrawireless:es440:-:*:*:*:*:*:*:*
cpe:2.3:h:sierrawireless:es450:-:*:*:*:*:*:*:*
cpe:2.3:h:sierrawireless:gx400:-:*:*:*:*:*:*:*
cpe:2.3:h:sierrawireless:gx440:-:*:*:*:*:*:*:*
cpe:2.3:h:sierrawireless:gx450:-:*:*:*:*:*:*:*
cpe:2.3:h:sierrawireless:ls300:-:*:*:*:*:*:*:*
EPSS
Процентиль: 6%
0.00025
Низкий
4.3 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
CVSS3: 4.3
github
больше 3 лет назад
ACEmanager in Sierra Wireless ALEOS 4.4.2 and earlier on ES440, ES450, GX400, GX440, GX450, and LS300 devices allows remote attackers to read the filteredlogs.txt file, and consequently discover potentially sensitive boot-sequence information, via unspecified vectors.
EPSS
Процентиль: 6%
0.00025
Низкий
4.3 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
NVD-CWE-Other