Vulnerability Description
An Insufficiently Protected Credentials issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11. Sensitive information is insufficiently protected during transmission and vulnerable to sniffing, which could lead to information disclosure.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sierra Wireless | Airlink Raven Xe Firmware | <= - |
| Sierra Wireless | Airlink Raven Xe | - |
| Sierra Wireless | Airlink Raven Xt Firmware | - |
| Sierra Wireless | Airlink Raven Xt | - |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/98036Third Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-17-115-02Third Party AdvisoryUS Government ResourceVDB Entry
- http://www.securityfocus.com/bid/98036Third Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-17-115-02Third Party AdvisoryUS Government ResourceVDB Entry
FAQ
What is CVE-2017-6046?
CVE-2017-6046 is a vulnerability with a CVSS score of 7.5 (HIGH). An Insufficiently Protected Credentials issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11. Sensitive informatio...
How severe is CVE-2017-6046?
CVE-2017-6046 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-6046?
Check the references section above for vendor advisories and patch information. Affected products include: Sierra Wireless Airlink Raven Xe Firmware, Sierra Wireless Airlink Raven Xe, Sierra Wireless Airlink Raven Xt Firmware, Sierra Wireless Airlink Raven Xt.