Sierra Wireless AirLink ALEOS contains an unrestricted upload of file with dangerous type vulnerability. A specially crafted HTTP request can upload a file, res…

Sierra Wireless AirLink ALEOS contains an unrestricted upload vulnerability allowing attackers to upload executable files via specially crafted HTTP requests. The vulnerability requires authentication but can result in code execution on the webserver. The affected product may be end-of-life or end-of-service, and users are advised to discontinue use. This is a critical vulnerability that allows remote code execution through file upload functionality.