Airlink Connection Manager security advisor

26 July 2023 News

Sierra Wireless recently received reports of malicious actors attempting to compromise Airlink Connection Manager (ACM) instances that are deployed insecurely with exposed SSH and using the default administrative credentials. Sierra Wireless security guidance for the configuration of ACM instances strongly recommends changing the administrative credentials prior to operational deployment, and limiting the exposure of SSH to secure management networks only.

As the frequency of compromise or compromise attempts appears to be increasing, Sierra Wireless strongly recommends that all customers review their ACM configuration and logs.

All versions of ACM may be vulnerable if they are deployed with SSH accessible from an insecure network such as the public Internet, and are using insecure credentials, including default, weak, or publicly known credentials. If an attacker can connect to an ACM instance and authenticate, they will gain full administrative control of the instance, allowing them to modify the configuration or access any secrets stored on the device.

Sierra Wireless recommends the following actions to secure your ACM instances:

• Ensure the administrative password, along with all other passwords, are changed from the defaults. All passwords should comply with accepted recommendations for strong passwords, such as those provided by Microsoft.

• Set external firewall rules to prevent access to SSH from insecure or untrusted networks such as the public Internet, preventing untrusted connections.

• Monitor ACM and firewall logs for unauthorised access attempts from unknown sources, and implement appropriate rules to block such attempts.

For more information visit https://source.sierrawireless.com

Further reading:

SIMCom Symposium 2024
Otto Wireless Solutions News
Otto Wireless Solutions, in conjunction with SIMCom Wireless Solutions, will be hosting a free half-day seminar in Johannesburg – The SIMCom Symposium 2024.

Read more...

---

From the editor's desk: Exciting times ahead?
Technews Publishing News
There are many subjects that excite me in this world, but two of the larger technical subjects are, firstly, renewable energy, and secondly, the idea of artificial intelligence as it continues to evolve ...

Read more...

---

Microchip expands partnership with TSMC
News
Microchip Technology has announced it has expanded its partnership with TSMC to enable a specialised 40 nm manufacturing capacity at Japan Advanced Semiconductor Manufacturing.

Read more...

---

Huge SA grid battery project
News
A standalone battery energy storage system (BESS) has won preferred bidder status under South Africa’s Energy Storage Capacity Independent Power Producer Procurement Programme (ESIPPPP).

Read more...

---

Mouser sponsors NCP Cup 2024
News
The NXP Cup is an EMEA-based autonomous car competition, presented by NXP Semiconductors, which is designed to provide students with real-world experiences in autonomous vehicle programming and building.

Read more...

---

TrinaTracker brings its smart solar tracking to SA
News
The Vanguard 1P is designed to provide customers with trackers that combine suitability for flat terrain, together with outstanding system stability and reliability, quick installation, and flexible external compatibility.

Read more...

---

Nordex adding 830 MW of wind generation
News
Nordex Energy South Africa will be adding 830 MW of wind energy generation capacity to the company’s already-installed 1 GW base.

Read more...

---

Invertek produces its three millionth drive
iTek Drives News
Invertek Drives Ltd, a global manufacturer of variable frequency drive (VFD) technology, has celebrated producing its three millionth VFD, just three years after its two-million milestone.

Read more...

---

Analog Devices’ digital storefront is live
News
Analog Devices has designed an improved digital experience with users in mind – a new analog.com website and eShop.

Read more...

---

Vicor Powering Innovation podcast
News
The episode explores electrification with Lightning Motorcycles, a company that produces the fastest electric motorcycle on the planet.

Read more...

---