CVE-2015-2054

MEDIUM · 4.3 CVSS Gepubliceerd: 23-02-2015

Beschrijving

CRLF injection vulnerability in export.cfg in the web-based administrative console for Sierra Wireless AirCard 760S, 762S, and 763S allows remote attackers to inject arbitrary headers via CRLF sequences in the save parameter.

Vendors

Sierra Wireless

Affected products

Sierra Wireless Aircard 760s Sierra Wireless Aircard 762s Sierra Wireless Aircard 763s

References

seclists.org
www.securityfocus.com