CVE-2023-31279

Improper Authentication

State: Published
Severity: 8.1 High
Published: Dec 20, 2024
Updated: Dec 24, 2024
Reserved: Apr 26, 2023

Description

The AirVantage platform is vulnerable to an unauthorized attacker registering previously unregistered devices on the AirVantage platform when the owner has not disabled the AirVantage Management Service on the devices or registered the device. This could enable an attacker to configure, manage, and execute AT commands on an unsuspecting user’s devices.

Scores

CVSS	Score	Vector	Source
3.1	8.1 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H	SWI

Weaknesses

CWE-287 Improper Authentication

Affected Products

Product	Versions
AirVantage, AirVantage-Capable Devices: All Sierra Wireless devices.Sierra Wireless	Devices not registered in AirVantage with the AirVantage Management Service enabled.Affected

References

https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-002/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.