CyberSec.Space Logo
Back to CVE Browser

CVE-2013-2819

CRITICAL
9.3
CVSS Severity Score
EPSS Score0.1540%
EPSS Percentile43.28th
PublishedJan 15, 2014
Last ModifiedApr 29, 2026

Vulnerability Description

The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows remote attackers to install Trojan horse firmware by leveraging cleartext credentials in a crafted (1) update or (2) reprogramming action.

Affected Platforms (CPE)

💻
Sierrawireless

Raven X Ev Do Firmware

= 4221_4.0.11.003
💻
Sierrawireless

Raven X Ev Do Firmware

= 4228_4.0.11.003
🔌
Sierrawireless

Airlink Mp At\&t

All versions
🔌
Sierrawireless

Airlink Mp At\&t Wifi

All versions
🔌
Sierrawireless

Airlink Mp Bell

All versions
🔌
Sierrawireless

Airlink Mp Bell Wifi

All versions
🔌
Sierrawireless

Airlink Mp Row

All versions
🔌
Sierrawireless

Airlink Mp Row Wifi

All versions
🔌
Sierrawireless

Airlink Mp Sprint

All versions
🔌
Sierrawireless

Airlink Mp Sprint Wifi

All versions
🔌
Sierrawireless

Airlink Mp Telus

All versions
🔌
Sierrawireless

Airlink Mp Telus Wifi

All versions
🔌
Sierrawireless

Airlink Mp Verizon

All versions
🔌
Sierrawireless

Airlink Mp Verizon Wifi

All versions
🔌
Sierrawireless

Pinpoint X

All versions
🔌
Sierrawireless

Pinpoint Xt

All versions
🔌
Sierrawireless

Raven X

All versions
🔌
Sierrawireless

Raven X Ev Do

All versions
🔌
Sierrawireless

Raven Xe

All versions
🔌
Sierrawireless

Raven Xt

All versions

References & Advisories

🔗 http://ics-cert.us-cert.gov/advisories/ICSA-14-007-01A
🔗 http://www.sierrawireless.com/resources/support/airlink/docs/raven%20security%20vulnerability%202014-01-10.pdf
🔗 http://ics-cert.us-cert.gov/advisories/ICSA-14-007-01A
🔗 http://www.sierrawireless.com/resources/support/airlink/docs/raven%20security%20vulnerability%202014-01-10.pdf

Related Vulnerabilities

CVE-2013-282010.0

The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows remote attackers to reprogram the fir...

CVE-2026-53430

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc (GRPC.Compressor.Gzip, GRPC.Mes...

CVE-2026-48854

Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc allows unauthenticated attackers to exhaust...

CVE-2026-48853

Deserialization of Untrusted Data and Allocation of Resources Without Limits or Throttling vulnerabilities in elixir-grpc grpc all...