CVE-2019-13988: Sierra Wireless Mgos

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Sierra Wireless MGOS before 3.15.2 and 4.x before 4.3 allows attackers to read log files via a Direct Request (aka Forced Browsing).

Affected products

• Sierra Wireless Mgos: before 4.3 (fixed in 4.3); before 3.15.2 (fixed in 3.15.2)

Published 2022-12-26. Last modified 2026-06-17.