CVE-2018-4061

🗓️ 06 May 2019 18:00:11Reported by talosType

Command injection vulnerability in Sierra Wireless AirLink ES450 FW 4.9.3

Reporter	Title	Published	Views	Family All 15
0day.today	Sierra Wireless AirLink ES450 ACEManager iplogging.cgi Command Injection Exploit	29 Apr 201900:00	–	zdt
CNVD	Sierra Wireless AirLink ES450 Operating System Command Injection Vulnerability	28 Apr 201900:00	–	cnvd
Check Point Advisories	Sierra Wireless AirLink Command Injection (CVE-2018-4061)	23 May 201900:00	–	checkpoint_advisories
Cvelist	CVE-2018-4061	6 May 201918:00	–	cvelist
EUVD	EUVD-2018-15847	7 Oct 202500:30	–	euvd
ICS	Sierra Wireless AirLink ALEOS (Update B)	2 May 201900:00	–	ics
NVD	CVE-2018-4061	6 May 201918:29	–	nvd
Packet Storm	Sierra Wireless AirLink ES450 ACEManager iplogging.cgi Command Injection	26 Apr 201900:00	–	packetstorm
Prion	Command injection	6 May 201918:29	–	prion
RedhatCVE	CVE-2018-4061	9 Jan 202611:56	–	redhatcve

NVD

Vulners

Node

sierrawireless airlink_es450_firmwareMatch4.9.3

AND

sierrawireless airlink_es450Match-

[
  {
    "product": "Sierra Wireless",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Sierra Wireless AirLink ES450 FW 4.9.3"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/152646/Sierra-Wireless-AirLink-ES450-ACEManager-iplogging.cgi-Command-Injection.html
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-19-122-03
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2018-0746
securityfocus	www.securityfocus.com/bid/108147

21 Nov 2024 04:06Current

8.7High risk

Vulners AI Score8.7

CVSS 38.8

CVSS 29

EPSS0.0027

CWE-78