CRLF injection vulnerability in export.cfg in the web-based administrative console for Sierra Wireless AirCard 760S, 762S, and 763S allows remote attackers to inject arbitrary headers via CRLF sequences in the save parameter.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Sierra_wireless_aircard_760s | Sierra_wireless | * | * |
| Sierra_wireless_aircard_762s | Sierra_wireless | * | * |
| Sierra_wireless_aircard_763s | Sierra_wireless | * | * |