What’s Vulnerable › Vulnerabilities

CVE-2013-2819

• Severity: critical (CVSS 9.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-01-15 · updated 2026-06-16
• Weakness: CWE-255

Description

The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows remote attackers to install Trojan horse firmware by leveraging cleartext credentials in a crafted (1) update or (2) reprogramming action.

Affected products

• SierraWireless Airlink Mp At&T: all versions
• SierraWireless Airlink Mp At&T Wifi: all versions
• SierraWireless Airlink Mp Bell: all versions
• SierraWireless Airlink Mp Bell Wifi: all versions
• SierraWireless Airlink Mp Row: all versions
• SierraWireless Airlink Mp Row Wifi: all versions
• SierraWireless Airlink Mp Sprint: all versions
• SierraWireless Airlink Mp Sprint Wifi: all versions
• SierraWireless Airlink Mp Telus: all versions
• SierraWireless Airlink Mp Telus Wifi: all versions
• SierraWireless Airlink Mp Verizon: all versions
• SierraWireless Airlink Mp Verizon Wifi: all versions
• SierraWireless Pinpoint X: all versions
• SierraWireless Pinpoint Xt: all versions
• SierraWireless Raven X: all versions
• SierraWireless Raven X Ev-Do: all versions
• SierraWireless Raven X Ev-Do Firmware: 4221_4.0.11.003, 4228_4.0.11.003
• SierraWireless Raven Xe: all versions
• SierraWireless Raven Xt: all versions

References

• http://ics-cert.us-cert.gov/advisories/ICSA-14-007-01A
• http://www.sierrawireless.com/resources/support/airlink/docs/raven%20security%20vulnerability%202014-01-10.pdf
• http://ics-cert.us-cert.gov/advisories/ICSA-14-007-01A
• http://www.sierrawireless.com/resources/support/airlink/docs/raven%20security%20vulnerability%202014-01-10.pdf

Get alerted when CVE-2013-2819 or the next vulnerability affects your stack