CVE-2013-2819: Sierra Wireless AirLink Mp At&t

High severity, CVSS 9.3. EPSS: 1.9% chance of exploitation in the next 30 days.

The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows remote attackers to install Trojan horse firmware by leveraging cleartext credentials in a crafted (1) update or (2) reprogramming action.

Affected products

• Sierra Wireless AirLink Mp At&t
• Sierra Wireless AirLink Mp At&t Wifi
• Sierra Wireless AirLink Mp Bell
• Sierra Wireless AirLink Mp Bell Wifi
• Sierra Wireless AirLink Mp Row
• Sierra Wireless AirLink Mp Row Wifi
• Sierra Wireless AirLink Mp Sprint
• Sierra Wireless AirLink Mp Sprint Wifi
• Sierra Wireless AirLink Mp Telus
• Sierra Wireless AirLink Mp Telus Wifi
• Sierra Wireless AirLink Mp Verizon
• Sierra Wireless AirLink Mp Verizon Wifi
• Sierra Wireless Pinpoint X
• Sierra Wireless Pinpoint Xt
• Sierra Wireless Raven X
• Sierra Wireless Raven X Ev-Do
• Sierra Wireless Raven X Ev-Do Firmware: version 4221_4.0.11.003 only; version 4228_4.0.11.003 only
• Sierra Wireless Raven XE
• Sierra Wireless Raven Xt

Published 2014-01-15. Last modified 2026-06-16.