CVE-2013-2820

Summary

CVE	CVE-2013-2820
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2014-01-15 16:08:00 UTC
Updated	2014-01-16 16:47:00 UTC
Description	The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows remote attackers to reprogram the firmware via a replay attack using UDP ports 17336 and 17388.

Risk And Classification

Problem Types: CWE-287

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Hardware	Sierrawireless	Airlink Mp Att	-	All	All	All
Hardware	Sierrawireless	Airlink Mp Att Wifi	-	All	All	All
Hardware	Sierrawireless	Airlink Mp Att	-	All	All	All
Hardware	Sierrawireless	Airlink Mp Att	-	All	All	All
Hardware	Sierrawireless	Airlink Mp Att Wifi	-	All	All	All
Hardware	Sierrawireless	Airlink Mp Att Wifi	-	All	All	All
Hardware	Sierrawireless	Airlink Mp Bell	-	All	All	All
Hardware	Sierrawireless	Airlink Mp Bell	-	All	All	All
Hardware	Sierrawireless	Airlink Mp Bell Wifi	-	All	All	All
Hardware	Sierrawireless	Airlink Mp Bell Wifi	-	All	All	All
Hardware	Sierrawireless	Airlink Mp Row	-	All	All	All
Hardware	Sierrawireless	Airlink Mp Row	-	All	All	All
Hardware	Sierrawireless	Airlink Mp Row Wifi	-	All	All	All
Hardware	Sierrawireless	Airlink Mp Row Wifi	-	All	All	All
Hardware	Sierrawireless	Airlink Mp Sprint	-	All	All	All
Hardware	Sierrawireless	Airlink Mp Sprint	-	All	All	All
Hardware	Sierrawireless	Airlink Mp Sprint Wifi	-	All	All	All
Hardware	Sierrawireless	Airlink Mp Sprint Wifi	-	All	All	All
Hardware	Sierrawireless	Airlink Mp Telus	-	All	All	All
Hardware	Sierrawireless	Airlink Mp Telus	-	All	All	All
Hardware	Sierrawireless	Airlink Mp Telus Wifi	-	All	All	All
Hardware	Sierrawireless	Airlink Mp Telus Wifi	-	All	All	All
Hardware	Sierrawireless	Airlink Mp Verizon	-	All	All	All
Hardware	Sierrawireless	Airlink Mp Verizon	-	All	All	All
Hardware	Sierrawireless	Airlink Mp Verizon Wifi	-	All	All	All
Hardware	Sierrawireless	Airlink Mp Verizon Wifi	-	All	All	All
Hardware	Sierrawireless	Pinpoint X	-	All	All	All
Hardware	Sierrawireless	Pinpoint X	-	All	All	All
Hardware	Sierrawireless	Pinpoint Xt	-	All	All	All
Hardware	Sierrawireless	Pinpoint Xt	-	All	All	All
Hardware	Sierrawireless	Raven X	-	All	All	All
Hardware	Sierrawireless	Raven X	-	All	All	All
Hardware	Sierrawireless	Raven Xe	-	All	All	All
Hardware	Sierrawireless	Raven Xe	-	All	All	All
Hardware	Sierrawireless	Raven Xt	-	All	All	All
Hardware	Sierrawireless	Raven Xt	-	All	All	All
Hardware	Sierrawireless	Raven X Ev-do	-	All	All	All
Hardware	Sierrawireless	Raven X Ev-do	-	All	All	All
Operating System	Sierrawireless	Raven X Ev-do Firmware	4221_4.0.11.003	All	All	All
Operating System	Sierrawireless	Raven X Ev-do Firmware	4228_4.0.11.003	All	All	All
Operating System	Sierrawireless	Raven X Ev-do Firmware	4221_4.0.11.003	All	All	All
Operating System	Sierrawireless	Raven X Ev-do Firmware	4228_4.0.11.003	All	All	All

References

Reference	Source	Link	Tags
Sierrwireless	CONFIRM	www.sierrawireless.com	Vendor Advisory
Sierra Wireless AirLink Raven X EV-DO Vulnerabilities (Update A) \| ICS-CERT	MISC	ics-cert.us-cert.gov	US Government Resource
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.