« Volver al listado

CVE-2013-2819

Estado: ModificadaAlta (9.3)—

The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows remote attackers to install Trojan horse firmware by leveraging cleartext credentials in a crafted (1) update or (2) reprogramming action.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (19)

Sierrawireless — Airlink MP At&tSierrawireless — Airlink MP At&t WifiSierrawireless — Airlink MP BellSierrawireless — Airlink MP Bell WifiSierrawireless — Airlink MP ROWSierrawireless — Airlink MP ROW WifiSierrawireless — Airlink MP SprintSierrawireless — Airlink MP Sprint WifiSierrawireless — Airlink MP TelusSierrawireless — Airlink MP Telus WifiSierrawireless — Airlink MP VerizonSierrawireless — Airlink MP Verizon WifiSierrawireless — Pinpoint XSierrawireless — Pinpoint XTSierrawireless — Raven XSierrawireless — Raven X Ev-doSierrawireless — Raven X Ev-do FirmwareSierrawireless — Raven XESierrawireless — Raven XT

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-2819",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "ics-cert@hq.dhs.gov",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-01-15T16:08:13.017",
  "references": [
    {
      "url": "http://ics-cert.us-cert.gov/advisories/ICSA-14-007-01A",
      "tags": [
        "US Government Resource"
      ],
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "http://www.sierrawireless.com/resources/support/airlink/docs/raven%20security%20vulnerability%202014-01-10.pdf",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "http://ics-cert.us-cert.gov/advisories/ICSA-14-007-01A",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.sierrawireless.com/resources/support/airlink/docs/raven%20security%20vulnerability%202014-01-10.pdf",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-255"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows remote attackers to install Trojan horse firmware by leveraging cleartext credentials in a crafted (1) update or (2) reprogramming action."
    },
    {
      "lang": "es",
      "value": "El gateway Sierra Wireless AirLink Raven X EV-DO 4221_0.0.11.003 y 4228_4.0.11.003 permite a atacantes remotos instalar un firmware troyano aprovechando credenciales en texto plano en un (1) update manipulado o (2) acción de reprogramación manipulada."
    }
  ],
  "lastModified": "2026-06-16T23:54:00.923",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sierrawireless:raven_x_ev-do_firmware:4221_4.0.11.003:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6598EB85-9308-4C86-B99A-86DBD10B2891"
            },
            {
              "criteria": "cpe:2.3:o:sierrawireless:raven_x_ev-do_firmware:4228_4.0.11.003:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "54E7B1E7-CB00-4782-A43C-3FF5EEFE64D6"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sierrawireless:airlink_mp_at\\&t:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "53755BE2-114E-4653-AFC2-821B00EC4FFA"
            },
            {
              "criteria": "cpe:2.3:h:sierrawireless:airlink_mp_at\\&t_wifi:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CBB741FE-9052-419A-B9D3-0884C2ACBDC4"
            },
            {
              "criteria": "cpe:2.3:h:sierrawireless:airlink_mp_bell:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "786A6F41-D31E-43C5-B8DD-DE067E9539B5"
            },
            {
              "criteria": "cpe:2.3:h:sierrawireless:airlink_mp_bell_wifi:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "58A53D52-FEA3-4846-90D9-9F1798079EED"
            },
            {
              "criteria": "cpe:2.3:h:sierrawireless:airlink_mp_row:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6582EBFD-F674-4875-8C25-7C34A23C5D77"
            },
            {
              "criteria": "cpe:2.3:h:sierrawireless:airlink_mp_row_wifi:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AB939927-FA4F-40FE-A0DD-FF07A7D632F4"
            },
            {
              "criteria": "cpe:2.3:h:sierrawireless:airlink_mp_sprint:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "98A8359A-F306-43F9-A493-A84E83392CDC"
            },
            {
              "criteria": "cpe:2.3:h:sierrawireless:airlink_mp_sprint_wifi:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1668778A-D804-4D84-9A31-F7EE54BD415A"
            },
            {
              "criteria": "cpe:2.3:h:sierrawireless:airlink_mp_telus:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4403EE5A-CE5F-44EC-B5C6-2374889D79FD"
            },
            {
              "criteria": "cpe:2.3:h:sierrawireless:airlink_mp_telus_wifi:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EF1FCBA7-05A8-4591-8A5E-E1BE168E15F5"
            },
            {
              "criteria": "cpe:2.3:h:sierrawireless:airlink_mp_verizon:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A9093B6C-A10F-4149-BF20-F7732B4EE3FF"
            },
            {
              "criteria": "cpe:2.3:h:sierrawireless:airlink_mp_verizon_wifi:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B52509FC-B6F6-4F3C-BC8E-E85684762C90"
            },
            {
              "criteria": "cpe:2.3:h:sierrawireless:pinpoint_x:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A4227E6F-284F-4EDF-86CA-C4AD704C04AD"
            },
            {
              "criteria": "cpe:2.3:h:sierrawireless:pinpoint_xt:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B07D5090-3307-4EAD-B4B4-1F0C72DE1638"
            },
            {
              "criteria": "cpe:2.3:h:sierrawireless:raven_x:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "50D6F983-72E5-4DF7-9F09-06BDE2C17C18"
            },
            {
              "criteria": "cpe:2.3:h:sierrawireless:raven_x_ev-do:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2BE2ACC6-8F72-43D2-8717-BE5B9D84D913"
            },
            {
              "criteria": "cpe:2.3:h:sierrawireless:raven_xe:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0070BC42-877D-4B86-9F72-7241E104480A"
            },
            {
              "criteria": "cpe:2.3:h:sierrawireless:raven_xt:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C33F271D-81BD-4B66-9EF6-6BEFA9C775A9"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "evaluatorComment": "Per: http://www.sierrawireless.com/resources/support/airlink/docs/raven%20security%20vulnerability%202014-01-10.pdf\n\n\"Products affected by this vulnerability include the Raven X, Raven XE, Raven XT, PinPoint X, PinPoint XT and MP Products.\"",
  "sourceIdentifier": "ics-cert@hq.dhs.gov"
}