CVE-2018-4070

An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGetTask.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. This binary does not have any restricted configuration settings, so once the MSCIID is discovered, any authenticated user can send...

CVE-2018-4070

CVE-2018-4070 affects Sierra Wireless AirLink ES450 FW 4.9.3, specifically the ACEManager Embedded_Ace_Get_Task.cgi endpoint. The vulnerability enables information disclosure and, per the advisory, can let an authenticated user, after MSCIID discovery, send configuration changes via /cgi-bin/Embe...

CVE-2018-4065

CVE-2018-4065 : A reflected cross-site scripting vulnerability exists in Sierra Wireless AirLink ES450 FW 4.9.3 via the ACEManager ping_result.cgi. A specially crafted HTTP ping can cause JavaScript to execute in the victim’s browser when the user is lured to click a link or embedded URL. Affecte...

CVE-2018-4061

An exploitable command injection vulnerability exists in the ACEManager iplogging.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can inject arbitrary commands, resulting in arbitrary command execution. An attacker can send an authenticated HTTP reque...

CVE-2018-4061

CVE-2018-4061 is an exploitable OS command injection in ACEManager iplogging.cgi of Sierra Wireless AirLink ES450 FW 4.9.3. An authenticated HTTP request can inject commands, enabling remote code execution (root) via mis-handling of the -z tcpdump flag in iplogging.cgi. Public advisories (Talos/T...

CVE-2018-4068

An exploitable information disclosure vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A HTTP request can result in disclosure of the default configuration for the device. An attacker can send an unauthenticated HTTP request to trigger this...

CVE-2018-4069

An information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The ACEManager authentication functionality is done in plaintext XML to the web server. An attacker can listen to network traffic upstream from the device to...

CVE-2018-4069

CVE-2018-4069 is an information-disclosure vulnerability in Sierra Wireless AirLink ES450 ACEManager authentication. The flaw stems from sending authentication data in plaintext XML over HTTP to the web server, enabling an attacker who can sniff network traffic upstream to access credentials. Pub...

PT-2019-10790

Name of the Vulnerable Software and Affected Versions Sierra Wireless AirLink ES450 version 4.9.3 Sierra Wireless AirLink ALEOS affected versions not specified Description A remote code execution issue exists in the upload.cgi functionality of Sierra Wireless AirLink devices. A crafted HTTP reque...

CVE-2018-4063: Unrestricted Upload of File with Dangerous Type

An exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can upload a file, resulting in executable code being uploaded, and routable, to the webserver. An attacker can make an authenticat...

PT-2019-10792

Name of the Vulnerable Software and Affected Versions Sierra Wireless AirLink ES450 FW version 4.9.3 Description A cross-site scripting issue exists in the ACEManager ping result.cgi functionality. This can be triggered by a specially crafted HTTP ping request, leading to the execution of...

PT-2019-10793

Name of the Vulnerable Software and Affected Versions Sierra Wireless AirLink ES450 FW version 4.9.3 Description A cross-site request forgery issue exists in the ACEManager functionality. This allows an attacker to trick an authenticated user into making unintended requests, potentially leading t...

PT-2019-10794

Name of the Vulnerable Software and Affected Versions Sierra Wireless AirLink ES450 FW version 4.9.3 Description An exploitable information disclosure issue exists in the ACEManager template load.cgi functionality. A specially crafted HTTP request can cause an information leak, resulting in the...

PT-2019-10789

Name of the Vulnerable Software and Affected Versions Sierra Wireless AirLink ES450 FW version 4.9.3 Description A hard-coded credentials issue exists in the snmpd function. Activating snmpd outside of the WebUI can cause the activation of the hard-coded credentials, resulting in the exposure of ...

PT-2019-10795

Name of the Vulnerable Software and Affected Versions Sierra Wireless AirLink ES450 FW version 4.9.3 Description An information disclosure issue exists in the ACEManager functionality. It allows an attacker to send an unauthenticated HTTP request, potentially disclosing the default configuration...

PT-2019-10797

Name of the Vulnerable Software and Affected Versions Sierra Wireless AirLink ES450 FW version 4.9.3 Description An Information Disclosure issue exists in the ACEManager EmbeddedAceGet Task.cgi functionality. This allows any authenticated user to send configuration changes using the...

PT-2019-10796

Name of the Vulnerable Software and Affected Versions Sierra Wireless AirLink ES450 FW version 4.9.3 Description An information disclosure issue exists in the ACEManager authentication functionality. This functionality uses plaintext XML to communicate with the web server, allowing an attacker to...

PT-2019-10799

Name of the Vulnerable Software and Affected Versions Sierra Wireless AirLink ES450 FW version 4.9.3 Description A Permission Assignment issue exists in the ACEManager EmbeddedAceSet Task.cgi functionality. The EmbeddedAceSet Task.cgi executable is used to change MSCII configuration values within...

PT-2019-10798

Name of the Vulnerable Software and Affected Versions Sierra Wireless AirLink ES450 FW version 4.9.3 Description An Information Disclosure issue exists in the ACEManager EmbeddedAceGet Task.cgi functionality. The EmbeddedAceTLGet Task.cgi executable is used to retrieve MSCII configuration values...

PT-2019-10800

Name of the Vulnerable Software and Affected Versions Sierra Wireless AirLink ES450 FW version 4.9.3 Description A Permission Assignment issue exists in the ACEManager EmbeddedAceSet Task.cgi functionality. The endpoint "/cgi-bin/Embeded Ace TLSet Task.cgi" allows for arbitrary setting writes,...