Command Injection Vulnerability in Sierra Wireless AirLink ES450
CVE-2018-4061

8.8HIGH

Key Information:

Vendor: Sierrawireless
Status: Sierra Wireless
Vendor: CVE Published:; 6 May 2019

🔔 Create Sierrawireless Vulnerability Alert

What is CVE-2018-4061?

A command injection vulnerability exists in the ACEManager iplogging.cgi function of Sierra Wireless AirLink ES450. The flaw allows attackers to send specially crafted HTTP requests that can execute arbitrary commands on the device. This vulnerability requires authentication but can be exploited by sending a specifically designed payload through the affected functionality, placing sensitive systems at risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch