SWI

Latest CVEs · RSS

• CVE-2025-14859 2026-04-07 · CVSS 7.0
  The Semtech LR11xx LoRa transceivers implement secure boot functionality using digital signatures to authenticate firmware. However, the implementation uses a n
• CVE-2025-14858 2026-04-07 · CVSS 5.1
  The Semtech LR11xx LoRa transceivers running early versions of firmware contains an information disclosure vulnerability in its firmware validation functionalit
• CVE-2025-14857 2026-04-07 · CVSS 5.4
  An improper access control vulnerability exists in Semtech LoRa LR11xxx transceivers running early versions of firmware where the memory write command accessibl
• CVE-2023-31280 2024-12-20 · CVSS 5.3
  An AirVantage online Warranty Checker tool vulnerability could allow an attacker to perform bulk enumeration of IMEI and Serial Numbers pairs. The AirVantage W
• CVE-2023-31279 2024-12-20 · CVSS 8.1
  The AirVantage platform is vulnerable to an unauthorized attacker registering previously unregistered devices on the AirVantage platform when the owner has not
• CVE-2020-13712 2024-12-20
  A command injection is possible through the user interface, allowing arbitrary command execution as the root user. oMG2000 running MGOS 3.15.1 or earlier is af
• CVE-2023-40465 2023-12-04 · CVSS 8.3
  Several versions of ALEOS, including ALEOS 4.16.0, include an opensource third-party component which can be exploited from the local area networ
• CVE-2023-40464 2023-12-04 · CVSS 8.1
  Several versions of ALEOS, including ALEOS 4.16.0, use a hardcoded SSL certificate and private key. An attacker with access to these items could
• CVE-2023-40463 2023-12-04 · CVSS 8.1
  When configured in debugging mode by an authenticated user with administrative privileges, ALEOS 4.16 and earlier store the SHA512 hash of the c
• CVE-2023-40462 2023-12-04 · CVSS 7.5
  The ACEManager component of ALEOS 4.16 and earlier does not perform input sanitization during authentication, which could potentially result in a Denial o
• CVE-2023-40461 2023-12-04 · CVSS 8.1
  The ACEManager component of ALEOS 4.16 and earlier allows an authenticated user with Administrator privileges to access a file upload field whic
• CVE-2023-40460 2023-12-04 · CVSS 7.1
  The ACEManager component of ALEOS 4.16 and earlier does not validate uploaded file names and types, which could potentially allow an authenticat
• CVE-2023-40459 2023-12-04 · CVSS 7.5
  The ACEManager component of ALEOS 4.16 and earlier does not adequately perform input sanitization during authentication, which could potentially result
• CVE-2023-40458 2023-11-29 · CVSS 7.5
  Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Sierra Wireless, Inc ALEOS could potentially allow a remote attacker to trigger a Denia
• CVE-2022-46649 2023-02-10
  Acemanager in ALEOS before version 4.16 allows a user with valid credentials to manipulate the IP logging operation to execute arbitrary shell commands on the d
• CVE-2022-46650 2023-02-10
  Acemanager in ALEOS before version 4.16 allows a user with valid credentials to reconfigure the device to expose the ACEManager credentials on the pre-login sta