CVE-2013-2819

Published: Jan 15, 2014Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows remote attackers to install Trojan horse firmware by leveraging cleartext credentials in a crafted (1) update or (2) reprogramming action.

Affected (20)

Products: Sierrawireless: Raven X Ev Do Firmware, Airlink Mp At&t, Airlink Mp At&t Wifi, Airlink Mp Bell, Airlink Mp Bell Wifi, Airlink Mp Row, Airlink Mp Row Wifi, Airlink Mp Sprint, Airlink Mp Sprint Wifi, Airlink Mp Telus, Airlink Mp Telus Wifi, Airlink Mp Verizon, Airlink Mp Verizon Wifi, Pinpoint X, Pinpoint Xt, Raven X, Raven X Ev Do, Raven Xe, Raven Xt

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Sierrawireless Raven X Ev Do Firmware	Version 4221_4.0.11.003
Sierrawireless Raven X Ev Do Firmware	Version 4228_4.0.11.003
Sierrawireless Airlink Mp At&t	All versions
Sierrawireless Airlink Mp At&t Wifi	All versions
Sierrawireless Airlink Mp Bell	All versions
Sierrawireless Airlink Mp Bell Wifi	All versions
Sierrawireless Airlink Mp Row	All versions
Sierrawireless Airlink Mp Row Wifi	All versions
Sierrawireless Airlink Mp Sprint	All versions
Sierrawireless Airlink Mp Sprint Wifi	All versions
Sierrawireless Airlink Mp Telus	All versions
Sierrawireless Airlink Mp Telus Wifi	All versions
Sierrawireless Airlink Mp Verizon	All versions
Sierrawireless Airlink Mp Verizon Wifi	All versions
Sierrawireless Pinpoint X	All versions
Sierrawireless Pinpoint Xt	All versions
Sierrawireless Raven X	All versions
Sierrawireless Raven X Ev Do	All versions
Sierrawireless Raven Xe	All versions
Sierrawireless Raven Xt	All versions