Sierra Wireless Raven XE vulnerabilities

2 CVEs affecting Sierra Wireless Raven XE, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-2820, published 2014-01-15.

More from Sierra Wireless.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-2820, published 2014-01-15. High severity, CVSS 10.0. EPSS: 3.9% chance of exploitation in the next 30 days. The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows remote attackers to reprogram the firmware via a replay attack using UDP ports 17336 and 17388.
• CVE-2013-2819, published 2014-01-15. High severity, CVSS 9.3. EPSS: 1.9% chance of exploitation in the next 30 days. The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows remote attackers to install Trojan horse firmware by leveraging cleartext credentials in a crafted (1)…