CVE-2016-5066

CVE-2016-5066 describes a critical vulnerability in Sierra Wireless GX 440 devices running ALEOS firmware version 4.3.2, stemming from the use of weak, hardcoded passwords for default accounts like admin, rauser, sconsole, and user. This vulnerability carries a CVSS score of 9.8 (CRITICAL), indicating that it can be exploited remotely with low complexity, requiring no user interaction, and leading to complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, publicly available exploit code, or significant community discussion, the inherent weakness of these default credentials presents a substantial risk to affected systems.