CVE-2015-2054 Other in n/a
Remote attackers can inject arbitrary headers via CRLF sequences in the admin console save parameter of Sierra Wireless AirCard devices.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2015-2054?
CVE-2015-2054 is a medium-severity vulnerability in n/a, published on 23 Feb 2015. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
CRLF injection vulnerability in export.cfg in the web-based administrative console for Sierra Wireless AirCard 760S, 762S, and 763S allows remote attackers to inject arbitrary headers via CRLF sequences in the save parameter.
Which versions are affected by CVE-2015-2054?
It affects 3 products.
Products include Sierra Wireless Sierra Wireless Aircard 760s, Sierra Wireless Sierra Wireless Aircard 762s, Sierra Wireless Sierra Wireless Aircard 763s.
How do I fix CVE-2015-2054?
No fix has been published for CVE-2015-2054 yet. Limit exposure of the affected software until one is available.
Is CVE-2015-2054 being exploited?
There is no known exploitation of CVE-2015-2054 in the wild and no public exploit code.
Sources
Also known as GHSA-r3mc-349f-qm79.