What’s Vulnerable › Vulnerabilities

CVE-2015-2054

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2015-02-23 · updated 2026-06-17

Description

CRLF injection vulnerability in export.cfg in the web-based administrative console for Sierra Wireless AirCard 760S, 762S, and 763S allows remote attackers to inject arbitrary headers via CRLF sequences in the save parameter.

Affected products

• Sierra Wireless Aircard 760S: all versions
• Sierra Wireless Aircard 762S: all versions
• Sierra Wireless Aircard 763S: all versions

References

• http://seclists.org/fulldisclosure/2015/Jan/58
• http://www.securityfocus.com/bid/74875
• http://seclists.org/fulldisclosure/2015/Jan/58
• http://www.securityfocus.com/bid/74875

Get alerted when CVE-2015-2054 or the next vulnerability affects your stack