CVE-2020-8782 - Vulnerability Details

Vendors	Products
Sierrawireless	Airlink Es440 Airlink Es450 Airlink Gx400 Airlink Gx440 Airlink Gx450 Airlink Ls300 Airlink Lx40 Airlink Lx60 Airlink Mp70 Airlink Mp70e Airlink Rv50 Airlink Rv50x Airlink Rv55 Aleos

Link	Providers
https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2020-005/

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "credits": [{"lang": "en", "value": "Sierra Wireless thanks Ruben Santamarta, Principal Security Consultant at IOActive for the responsible disclosure of these vulnerabilities."}], "datePublic": "2020-09-17T00:00:00", "descriptions": [{"lang": "en", "value": "Unauthenticated RPC server on ALEOS before 4.4.9, 4.9.5, and 4.14.0 allows remote code execution."}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2020-10-06T18:18:44", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2020-005/"}], "source": {"discovery": "EXTERNAL"}, "title": "ALEOS LAN-Side RPC Service Remote Code Execution", "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "DATE_PUBLIC": "2020-09-17T00:00:00.000Z", "ID": "CVE-2020-8782", "STATE": "PUBLIC", "TITLE": "ALEOS LAN-Side RPC Service Remote Code Execution"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "credit": [{"lang": "eng", "value": "Sierra Wireless thanks Ruben Santamarta, Principal Security Consultant at IOActive for the responsible disclosure of these vulnerabilities."}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Unauthenticated RPC server on ALEOS before 4.4.9, 4.9.5, and 4.14.0 allows remote code execution."}]}, "generator": {"engine": "Vulnogram 0.0.9"}, "impact": {"cvss": {"attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2020-005/", "refsource": "CONFIRM", "url": "https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2020-005/"}]}, "source": {"discovery": "EXTERNAL"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T10:12:10.167Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2020-005/"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2020-8782", "datePublished": "2020-10-06T13:54:53.534973Z", "dateReserved": "2020-02-07T00:00:00", "dateUpdated": "2024-09-16T21:58:13.333Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : n/a (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

credits : [ »

0 : { »

lang : en (string)

value : Sierra Wireless thanks Ruben Santamarta, Principal Security Consultant at IOActive for the responsible disclosure of these vulnerabilities. (string)

}

]

datePublic : 2020-09-17T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : Unauthenticated RPC server on ALEOS before 4.4.9, 4.9.5, and 4.14.0 allows remote code execution. (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : HIGH (string)

attackVector : ADJACENT_NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : n/a (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2020-10-06T18:18:44 (string)

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2020-005/ (string)

}

]

source : { »

discovery : EXTERNAL (string)

}

title : ALEOS LAN-Side RPC Service Remote Code Execution (string)

x_generator : { »

engine : Vulnogram 0.0.9 (string)

}

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : cve@mitre.org (string)

DATE_PUBLIC : 2020-09-17T00:00:00.000Z (string)

ID : CVE-2020-8782 (string)

STATE : PUBLIC (string)

TITLE : ALEOS LAN-Side RPC Service Remote Code Execution (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : n/a (string)

version : { »

version_data : [ »

0 : { »

version_value : n/a (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

credit : [ »

0 : { »

lang : eng (string)

value : Sierra Wireless thanks Ruben Santamarta, Principal Security Consultant at IOActive for the responsible disclosure of these vulnerabilities. (string)

}

]

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : Unauthenticated RPC server on ALEOS before 4.4.9, 4.9.5, and 4.14.0 allows remote code execution. (string)

}

]

}

generator : { »

engine : Vulnogram 0.0.9 (string)

}

impact : { »

cvss : { »

attackComplexity : HIGH (string)

attackVector : ADJACENT_NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : n/a (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2020-005/ (string)

refsource : CONFIRM (string)

url : https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2020-005/ (string)

}

]

}

source : { »

discovery : EXTERNAL (string)

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-04T10:12:10.167Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2020-005/ (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

assignerShortName : mitre (string)

cveId : CVE-2020-8782 (string)

datePublished : 2020-10-06T13:54:53.534973Z (string)

dateReserved : 2020-02-07T00:00:00 (string)

dateUpdated : 2024-09-16T21:58:13.333Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:sierrawireless:aleos:*:*:*:*:*:*:*:*", "matchCriteriaId": "E9B26ADF-46F0-42E9-B434-B1BDD3B3FA51", "versionEndExcluding": "4.4.9", "vulnerable": true}, {"criteria": "cpe:2.3:o:sierrawireless:aleos:*:*:*:*:*:*:*:*", "matchCriteriaId": "09E4578F-60F4-483A-B365-246A284A7236", "versionEndExcluding": "4.9.5", "versionStartIncluding": "4.5.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:sierrawireless:aleos:*:*:*:*:*:*:*:*", "matchCriteriaId": "D3937150-E9ED-44A5-B4CD-334023D45447", "versionEndExcluding": "4.14.0", "versionStartIncluding": "4.10.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:sierrawireless:airlink_es440:-:*:*:*:*:*:*:*", "matchCriteriaId": "A539809A-2F36-49E5-B6E1-7D13057CB5CC", "vulnerable": false}, {"criteria": "cpe:2.3:h:sierrawireless:airlink_es450:-:*:*:*:*:*:*:*", "matchCriteriaId": "3E042BE5-9B2E-42B9-B455-FDB35251B0A6", "vulnerable": false}, {"criteria": "cpe:2.3:h:sierrawireless:airlink_gx400:-:*:*:*:*:*:*:*", "matchCriteriaId": "3ED4507B-D487-40BB-8F0C-DDE252844BF7", "vulnerable": false}, {"criteria": "cpe:2.3:h:sierrawireless:airlink_gx440:-:*:*:*:*:*:*:*", "matchCriteriaId": "2F6861FB-F310-4B6D-BEDD-0B1611E5CE2D", "vulnerable": false}, {"criteria": "cpe:2.3:h:sierrawireless:airlink_gx450:-:*:*:*:*:*:*:*", "matchCriteriaId": "F20FC147-11AF-4E39-978A-0BC270B3CF01", "vulnerable": false}, {"criteria": "cpe:2.3:h:sierrawireless:airlink_ls300:-:*:*:*:*:*:*:*", "matchCriteriaId": "06302D92-3C19-414A-B976-779FE9B01915", "vulnerable": false}, {"criteria": "cpe:2.3:h:sierrawireless:airlink_lx40:-:*:*:*:*:*:*:*", "matchCriteriaId": "C4CEDB07-37C9-444F-9670-1807E7C3E734", "vulnerable": false}, {"criteria": "cpe:2.3:h:sierrawireless:airlink_lx60:-:*:*:*:*:*:*:*", "matchCriteriaId": "631F6248-DA94-4BF8-9F78-3636CBD67F2E", "vulnerable": false}, {"criteria": "cpe:2.3:h:sierrawireless:airlink_mp70:-:*:*:*:*:*:*:*", "matchCriteriaId": "3D40D05C-2C06-40D7-A060-AB695909E559", "vulnerable": false}, {"criteria": "cpe:2.3:h:sierrawireless:airlink_mp70e:-:*:*:*:*:*:*:*", "matchCriteriaId": "AD91027A-EFC8-4A29-B880-CE39D00DF86F", "vulnerable": false}, {"criteria": "cpe:2.3:h:sierrawireless:airlink_rv50:-:*:*:*:*:*:*:*", "matchCriteriaId": "282D04AE-5657-42C6-9EF1-89FA8388D746", "vulnerable": false}, {"criteria": "cpe:2.3:h:sierrawireless:airlink_rv50x:-:*:*:*:*:*:*:*", "matchCriteriaId": "AA1C2197-E412-4FE2-8DE8-3048A3727A58", "vulnerable": false}, {"criteria": "cpe:2.3:h:sierrawireless:airlink_rv55:-:*:*:*:*:*:*:*", "matchCriteriaId": "A67455C8-298D-4B2A-B99C-FCFDD3CFAED1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Unauthenticated RPC server on ALEOS before 4.4.9, 4.9.5, and 4.14.0 allows remote code execution."}, {"lang": "es", "value": "Sierra Wireless ALEOS versiones hasta 4.4.8, versiones hasta 4.9.4 y versiones hasta 4.11, permite una ejecuci\u00f3n de c\u00f3digo remota"}], "id": "CVE-2020-8782", "lastModified": "2024-11-21T05:39:25.630", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.6, "impactScore": 5.9, "source": "cve@mitre.org", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2020-10-06T14:15:13.387", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2020-005/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2020-005/"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:sierrawireless:aleos:*:*:*:*:*:*:*:* (string)

matchCriteriaId : E9B26ADF-46F0-42E9-B434-B1BDD3B3FA51 (string)

versionEndExcluding : 4.4.9 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:sierrawireless:aleos:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 09E4578F-60F4-483A-B365-246A284A7236 (string)

versionEndExcluding : 4.9.5 (string)

versionStartIncluding : 4.5.0 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:sierrawireless:aleos:*:*:*:*:*:*:*:* (string)

matchCriteriaId : D3937150-E9ED-44A5-B4CD-334023D45447 (string)

versionEndExcluding : 4.14.0 (string)

versionStartIncluding : 4.10.0 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:sierrawireless:airlink_es440:-:*:*:*:*:*:*:* (string)

matchCriteriaId : A539809A-2F36-49E5-B6E1-7D13057CB5CC (string)

vulnerable : false (boolean)

}

1 : { »

criteria : cpe:2.3:h:sierrawireless:airlink_es450:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3E042BE5-9B2E-42B9-B455-FDB35251B0A6 (string)

vulnerable : false (boolean)

}

2 : { »

criteria : cpe:2.3:h:sierrawireless:airlink_gx400:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3ED4507B-D487-40BB-8F0C-DDE252844BF7 (string)

vulnerable : false (boolean)

}

3 : { »

criteria : cpe:2.3:h:sierrawireless:airlink_gx440:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2F6861FB-F310-4B6D-BEDD-0B1611E5CE2D (string)

vulnerable : false (boolean)

}

4 : { »

criteria : cpe:2.3:h:sierrawireless:airlink_gx450:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F20FC147-11AF-4E39-978A-0BC270B3CF01 (string)

vulnerable : false (boolean)

}

5 : { »

criteria : cpe:2.3:h:sierrawireless:airlink_ls300:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 06302D92-3C19-414A-B976-779FE9B01915 (string)

vulnerable : false (boolean)

}

6 : { »

criteria : cpe:2.3:h:sierrawireless:airlink_lx40:-:*:*:*:*:*:*:* (string)

matchCriteriaId : C4CEDB07-37C9-444F-9670-1807E7C3E734 (string)

vulnerable : false (boolean)

}

7 : { »

criteria : cpe:2.3:h:sierrawireless:airlink_lx60:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 631F6248-DA94-4BF8-9F78-3636CBD67F2E (string)

vulnerable : false (boolean)

}

8 : { »

criteria : cpe:2.3:h:sierrawireless:airlink_mp70:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3D40D05C-2C06-40D7-A060-AB695909E559 (string)

vulnerable : false (boolean)

}

9 : { »

criteria : cpe:2.3:h:sierrawireless:airlink_mp70e:-:*:*:*:*:*:*:* (string)

matchCriteriaId : AD91027A-EFC8-4A29-B880-CE39D00DF86F (string)

vulnerable : false (boolean)

}

10 : { »

criteria : cpe:2.3:h:sierrawireless:airlink_rv50:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 282D04AE-5657-42C6-9EF1-89FA8388D746 (string)

vulnerable : false (boolean)

}

11 : { »

criteria : cpe:2.3:h:sierrawireless:airlink_rv50x:-:*:*:*:*:*:*:* (string)

matchCriteriaId : AA1C2197-E412-4FE2-8DE8-3048A3727A58 (string)

vulnerable : false (boolean)

}

12 : { »

criteria : cpe:2.3:h:sierrawireless:airlink_rv55:-:*:*:*:*:*:*:* (string)

matchCriteriaId : A67455C8-298D-4B2A-B99C-FCFDD3CFAED1 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Unauthenticated RPC server on ALEOS before 4.4.9, 4.9.5, and 4.14.0 allows remote code execution. (string)

}

1 : { »

lang : es (string)

value : Sierra Wireless ALEOS versiones hasta 4.4.8, versiones hasta 4.9.4 y versiones hasta 4.11, permite una ejecución de código remota (string)

}

]

id : CVE-2020-8782 (string)

lastModified : 2024-11-21T05:39:25.630 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : HIGH (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : PARTIAL (string)

baseScore : 7.5 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : PARTIAL (string)

vectorString : AV:N/AC:L/Au:N/C:P/I:P/A:P (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 6.4 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : ADJACENT_NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.6 (number)

impactScore : 5.9 (number)

source : cve@mitre.org (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 9.8 (number)

baseSeverity : CRITICAL (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2020-10-06T14:15:13.387 (string)

references : [ »

0 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2020-005/ (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2020-005/ (string)

}

]

sourceIdentifier : cve@mitre.org (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : NVD-CWE-noinfo (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Adjacent Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

Metrics

Attack Vector Adjacent Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object