1. Home
  2. CVE Database
  3. CVE-2015-2897
HIGH · 10.0

CVE-2015-2897

Sierra Wireless ALEOS before 4.4.2 on AirLink ES, GX, and LS devices has hardcoded root accounts, which makes it easier for remote attackers to obtain administrative access via a (1) SSH or (2) TELNET...

Vulnerability Description

Sierra Wireless ALEOS before 4.4.2 on AirLink ES, GX, and LS devices has hardcoded root accounts, which makes it easier for remote attackers to obtain administrative access via a (1) SSH or (2) TELNET session.

CVSS Score

10.0

HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE

Affected Products

VendorProductVersions
SierrawirelessAleos<= 4.4.1
SierrawirelessAirlink Es440All versions
SierrawirelessAirlink Es450All versions
SierrawirelessAirlink Gx440All versions
SierrawirelessAirlink Gx450All versions
SierrawirelessAirlink Ls300All versions

Related Weaknesses (CWE)

CWE-200

References

FAQ

What is CVE-2015-2897?

CVE-2015-2897 is a vulnerability with a CVSS score of 10.0 (HIGH). Sierra Wireless ALEOS before 4.4.2 on AirLink ES, GX, and LS devices has hardcoded root accounts, which makes it easier for remote attackers to obtain administrative access via a (1) SSH or (2) TELNET...

How severe is CVE-2015-2897?

CVE-2015-2897 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2015-2897?

Check the references section above for vendor advisories and patch information. Affected products include: Sierrawireless Aleos, Sierrawireless Airlink Es440, Sierrawireless Airlink Es450, Sierrawireless Airlink Gx440, Sierrawireless Airlink Gx450.