CVE-2019-13988 : Sierra Wireless MGOS before 3.15.2 and 4.x before 4.3 allows attackers to read l

Sierra Wireless MGOS before 3.15.2 and 4.x before 4.3 allows attackers to read log files via a Direct Request (aka Forced Browsing).

Published 2022-12-26 21:15:10

Updated 2023-01-05 18:16:10

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2019-13988

Sierrawireless » Mgos
Versions before (<) 4.3
cpe:2.3:o:sierrawireless:mgos:*:*:*:*:*:*:*:*
Matching versions
When used together with: Sierrawireless » Airlink Mg90 » Version: N/A
Sierrawireless » Mgos
Versions before (<) 3.15.2
cpe:2.3:o:sierrawireless:mgos:*:*:*:*:*:*:*:*
Matching versions
When used together with: Sierrawireless » Airlink Omg2000 » Version: N/A

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 28 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.5	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	2.8	3.6	NIST
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

Jump to