CVE-2016-5066

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 have weak passwords for admin, rauser, sconsole, and user

published April 10, 2017

CVSS
—
EPSS
2%
Percentile
78.7
In the wild
Unconfirmed
What it is

⚠️ Weak passwords are lurking in Sierra Wireless GX 440 devices! It's like leaving your front door unlocked with a sign saying "please come in". 🔑 Think of it as leaving the keys under the doormat for anyone to find. With weak default passwords for admin and user accounts, it’s an open invitation for trouble! An attacker could easily waltz in and take control of the device, accessing sensitive configurations or even leading to data breaches. This could disrupt services or expose your network to further attacks—definitely a scenario no one wants!

Put simply

Think of it as leaving the keys under the doormat for anyone to find. With weak default passwords for admin and user accounts, it’s an open invitation for trouble! The vulnerability arises from weak default passwords for several accounts on the Sierra Wireless GX 440 devices running ALEOS firmware 4.3.2. This allows unauthorized users to gain administrative access without much effort.

What to do

An attacker could easily waltz in and take control of the device, accessing sensitive configurations or even leading to data breaches. This could disrupt services or expose your network to further attacks—definitely a scenario no one wants! Change the default passwords for the admin, rauser, sconsole, and user accounts immediately. Consider implementing stronger password policies and enabling two-factor authentication where possible. Regularly audit devices for adherence to security best practices. You've got this! Lock it down and you'll enhance your security in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01839 · 78.7th percentile
Published
2017-04-10T03:00Z
EPSS history
Timeline
  • 10 APR 03:00Z
    Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 have weak passwords for admin, rauser, sconsole, and user
    cvelistv5