Full title: Sierra Wireless AirCard 760S/762S/763S Mobile Hotspot CRLF Injection Vulnerability Category: web applications Platform: hardware Sierra Wireless produces a mobile wi-fi hotspot device that is popular amongst telecommunication companies for re-branding to suit local markets. The AirCard 760S/762S/763S Web-based Administrative Console suffers from a HTTP header injection that allows an attacker to inject a file into the HTTP response from the device. # 0day.today @ http://0day.today/