Back in 2016, I released a report on multiple vulnerabilities in Sierra Wireless Raven XE & XT appliances:
In response to it, ICS-CERT had posted an alert here:
After almost an year, Sierra Wireless has resolved this report now, and a formal ICS-CERT advisory has been published:
Read on for more details.
Couple of days back, I posted multiple vulnerabilities in Sierra Wireless Raven XE & XT devices on Full Disclosure list, and here:
ICS-CERT team confirmed yesterday they have released an alert on this report as well now:
[ICS] Multiple vulnerabilities in Sierra Wireless AirLink Raven XE Industrial 3G Gateway
The Sierra Wireless Raven XE and XT wireless gateways are used in the following industries and applications: utilities, manufacturing, automation, oil and gas, Ethernet-based SCADA, and telemetry.