Information Disclosure in Sierra Wireless AirLink ES450 by Sierra Wireless
CVE-2018-4068

5.3MEDIUM

Key Information:

Vendor

Sierrawireless

Status
Sierra Wireless
Vendor
CVE Published:
6 May 2019

What is CVE-2018-4068?

This vulnerability affects the ACEManager functionality of the Sierra Wireless AirLink ES450 running firmware version 4.9.3. An attacker can exploit this flaw by sending an unauthenticated HTTP request, resulting in the disclosure of sensitive device configuration information. This could potentially allow unauthorized access to critical device settings.

Affected Version(s)

Sierra Wireless Sierra Wireless AirLink ES450 FW 4.9.3

References

https://talosintelligence.com/vulnerability_reports/TALOS...
x_refsource_MISC

EPSS Score

11% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.