Airlink Connection Manager security advisor

News

26 July 2023 News

Sierra Wireless recently received reports of malicious actors attempting to compromise Airlink Connection Manager (ACM) instances that are deployed insecurely with exposed SSH and using the default administrative credentials. Sierra Wireless security guidance for the configuration of ACM instances strongly recommends changing the administrative credentials prior to operational deployment, and limiting the exposure of SSH to secure management networks only.

As the frequency of compromise or compromise attempts appears to be increasing, Sierra Wireless strongly recommends that all customers review their ACM configuration and logs.

All versions of ACM may be vulnerable if they are deployed with SSH accessible from an insecure network such as the public Internet, and are using insecure credentials, including default, weak, or publicly known credentials. If an attacker can connect to an ACM instance and authenticate, they will gain full administrative control of the instance, allowing them to modify the configuration or access any secrets stored on the device.

Sierra Wireless recommends the following actions to secure your ACM instances:

• Ensure the administrative password, along with all other passwords, are changed from the defaults. All passwords should comply with accepted recommendations for strong passwords, such as those provided by Microsoft.

• Set external firewall rules to prevent access to SSH from insecure or untrusted networks such as the public Internet, preventing untrusted connections.

• Monitor ACM and firewall logs for unauthorised access attempts from unknown sources, and implement appropriate rules to block such attempts.

Share this article:

Strengthening industry through strategic partnerships at KITE 2025
Specialised Exhibitions News
The KwaZulu-Natal Industrial Technology Exhibition is not just an exhibition, it is a powerhouse of industry collaboration where visitors and exhibitors gain access to authoritative insights, technical expertise, and high-impact networking opportunities.

Read more...

Solar Youth Project calls on industry to step up
News
With the second cohort completed training and the first cohort returning for their final module, host companies are urgently needed to turn the training into a long-term opportunity.

Read more...

Conlog powers SA’s future with national smart meter rollout
News
Conlog recently secured the RT29-2024 contract from National Treasury, which is seen to be a major milestone towards modernising SA’s utility infrastructure.

Read more...

Zuchongzhi-3 sets new benchmark
News
This latest superconducting quantum computing prototype features 105 qubits and 182 couplers to operate at a speed 10¹5 times faster than the most powerful supercomputer currently available.

Read more...

Automatic device attestation certificate for Panasonic
News
DigiCert recently announced it has partnered with Panasonic Industry Europe to integrate DigiCert Device Trust Manager with Panasonic’s PAN-MaX intelligent manufacturing service for seamless Matter certification of interoperable smart home devices.

Read more...

From the editor's desk: Are we really being ripped off?
Technews Publishing News
To the surprise of many customers, installing solar panels does not always eliminate their utility bill – and in some cases, the power utility may impose additional charges on solar-powered homes.

Read more...

Winner of the Advanced Electronics Challenge
Avnet Silica News
Avnet Silica has named Hydronauten winner of the Advanced Electronics Challenge for breakthrough AI-driven vibration damping technology.

Read more...

Categories

News

Airlink Connection Manager security advisor

Further reading:

Publications by Technews