CVE:CVE-2015-2054
CNNVD:CNNVD-201502-365
Sierra Wireless AirCard 760S、762S and 763S都是加拿大Sierra Wireless公司的移动宽带设备。
多款Sierra Wireless AirCard产品的web-based管理控制台中的export.cfg文件存在CRLF注入漏洞。远程攻击者可借助‘save’参数中的CRLF序列利用该漏洞注入任意头。以下产品受到影响：Sierra Wireless AirCard 760S，762S和763S。
solution:Upgrade sierra_wireless sierra_wireless_aircard_760s to a higher version than *; Upgrade sierra_wireless sierra_wireless_aircard_762s to a higher version than *; Upgrade sierra_wireless sierra_wireless_aircard_763s to a higher version than *