CVE-2015-2054: Sierra Wireless Aircard 760s

Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days.

CRLF injection vulnerability in export.cfg in the web-based administrative console for Sierra Wireless AirCard 760S, 762S, and 763S allows remote attackers to inject arbitrary headers via CRLF sequences in the save parameter.

Affected products

• Sierra Wireless Sierra Wireless Aircard 760s: any version
• Sierra Wireless Sierra Wireless Aircard 762s: any version
• Sierra Wireless Sierra Wireless Aircard 763s: any version

Published 2015-02-23. Last modified 2026-06-17.