CVE-2013-2820
Critical
Description
The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows remote attackers to reprogram the firmware via a replay attack using UDP ports 17336 and 17388.
SeverityCritical
CVSS10.0
Exploit probability—
ProductSierrawireless Raven X Ev-do Firmware
PublishedJan 15, 2014
First seenJan 15, 2014
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sierrawireless raven_x_ev-do_firmware | 4221_4.0.11.003, 4228_4.0.11.003 | — |
| sierrawireless airlink_mp_at\&t | No range specified | — |
| sierrawireless airlink_mp_at\&t_wifi | No range specified | — |
| sierrawireless airlink_mp_bell | No range specified | — |
| sierrawireless airlink_mp_bell_wifi | No range specified | — |
| sierrawireless airlink_mp_row | No range specified | — |
| sierrawireless airlink_mp_row_wifi | No range specified | — |
| sierrawireless airlink_mp_sprint | No range specified | — |
| sierrawireless airlink_mp_sprint_wifi | No range specified | — |
| sierrawireless airlink_mp_telus | No range specified | — |
| sierrawireless airlink_mp_telus_wifi | No range specified | — |
| sierrawireless airlink_mp_verizon | No range specified | — |
| sierrawireless airlink_mp_verizon_wifi | No range specified | — |
| sierrawireless pinpoint_x | No range specified | — |
| sierrawireless pinpoint_xt | No range specified | — |
| sierrawireless raven_x | No range specified | — |
| sierrawireless raven_x_ev-do | No range specified | — |
| sierrawireless raven_xe | No range specified | — |
| sierrawireless raven_xt | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.