RV50 Incoming SMS - Security Issues

AirLink Routers
1

Hi,

I am installing RV50 cellular routers in an alarm notification system and I have a few concerns about the cyber security vulnerabilities of the setup.

  1. Is there a potential for a denial of service attack, if someone were to send in a large number of SMS messages to the RV50? Is this prevented by using the Trusted Numbers options. the manual states that it just ignores messages from untrusted numbers, but could it still cause a denial of service and prevent outgoing messages?
  2. Is there any issue with someone sending in multimedia SMS that could possible contain malicious data or viruses?

Any guidance on this would be appreciated.

2

Hi @mark123,

  1. According to the section Inbound SMS Messages and Trusted Phone Number of https://source.sierrawireless.com/resources/airlink/software_reference_docs/airlink-rv-series---configuration-guide/#sthash.hGHWkxks.dpbs (page 237-239), when Trusted Phone Number security is enabled, incoming messages coming from the phone numbers in the Trusted Phone Number list are the only ones for which commands will be performed (relay, response etc.) or gateway messages forwarded. Incoming messages from all other phone numbers will be ignored. It does not cause a denial of service and prevents outgoing messages.

  2. According to the section SMS Overview and Sending SMS Commands to an AirLink Router of https://source.sierrawireless.com/resources/airlink/software_reference_docs/airlink-rv-series---configuration-guide/#sthash.hGHWkxks.dpbs (page 226), SMS must be sent in the correct format. If the format is wrong, this device refuses to process it.
    Besides, SMS messages being sent must be in ASCII hex format. Please refer to pages 560 and 561 of https://source.sierrawireless.com/resources/airlink/software_reference_docs/airlink-rv-series---configuration-guide/#sthash.hGHWkxks.dpbs.

Thanks,