Description
When configured in
debugging mode by an authenticated user with
administrative
privileges, ALEOS 4.16 and earlier store the SHA512
hash of the common
root password for that version in a directory
accessible to a user
with root privileges or equivalent access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SierraWireless | ALEOS | 4.10 – ≤ 4.16, ≤ 4.9.8 | — |
Advisories 1
- ICSA-23-341-06 Sierra Wireless AirLink with ALEOS firmware CISA ICS & IT advisories · Dec 7, 2023