medium4.3
CVE-2015-2054
CRLF injection vulnerability in export.cfg in the web-based administrative console for Sierra Wireless AirCard 760S, 762S, and 763S allows remote attackers to …
Impact
CRLF injection vulnerability in export.cfg in the web-based administrative console for Sierra Wireless AirCard 760S, 762S, and 763S allows remote attackers to inject arbitrary headers via CRLF sequences in the save parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sierra Wireless | Sierra Wireless Aircard 760s | All versions |
| Sierra Wireless | Sierra Wireless Aircard 762s | All versions |
| Sierra Wireless | Sierra Wireless Aircard 763s | All versions |