PT-2017-8687
CVE-2016-5070
·
Published
2017-04-10
·
Updated
2017-04-14
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Sierra Wireless GX 440 version 4.3.2
Description
The issue concerns the storage of passwords in cleartext. This means that passwords are not properly encrypted, potentially allowing unauthorized access to sensitive information.
Recommendations
For version 4.3.2, consider updating to a newer version that properly encrypts passwords, if available. As a temporary workaround, restrict access to the device and its configuration to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾