CVE-2015-2054

CRLF injection vulnerability in export.cfg in the web-based administrative console for Sierra Wireless AirCard 760S, 762S, and 763S allows remote attackers to inject arbitrary headers via CRLF sequences in the save parameter.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2015-02-23

Last modified

2024-08-06

Affected products

• Sierra Wireless Aircard 760s (Sierra Wireless)
• Sierra Wireless Aircard 762s (Sierra Wireless)
• Sierra Wireless Aircard 763s (Sierra Wireless)

References

• http://seclists.org/fulldisclosure/2015/Jan/58
• http://www.securityfocus.com/bid/74875