Log in Start free

Vulnerability · Published Dec 20, 2024 · Assigned by SWI

CVE-2023-31280Exposure of Sensitive Information to an Unauthorized Actor

Medium 5.3

In plain English

A medium-severity information exposure in AirVantage, AirVantage-Capable Devices: All Sierra Wireless devices. from Sierra Wireless. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 32% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.4%top 68.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

An AirVantage online Warranty Checker tool vulnerability could allow an attacker to perform bulk enumeration of IMEI and Serial Numbers pairs. The AirVantage Warranty Checker is updated to no longer return the IMEI and Serial Number in addition to the warranty status when the Serial Number or IMEI is used to look up warranty status.

Affected products (as reported)

VendorProductVersions
Sierra Wireless AirVantage, AirVantage-Capable Devices: All Sierra Wireless devices. All Sierra Wireless devices.

Weakness: CWE-200 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References