Information Disclosure Vulnerability in Sierra Wireless AirLink ES450 Authentication

CVE-2018-4069

What is CVE-2018-4069?

An information disclosure vulnerability in the ACEManager authentication of Sierra Wireless AirLink ES450 allows attackers to intercept sensitive data transmitted in plaintext XML format. By monitoring network traffic upstream from the device, an unauthorized entity could exploit this issue to gain access to confidential information, potentially compromising the security of the device and its associated network.

References