CVE-2018-4070

CVE-2018-4070 affects Sierra Wireless AirLink ES450 FW 4.9.3, specifically the ACEManager Embedded_Ace_Get_Task.cgi endpoint. The vulnerability enables information disclosure and, per the advisory, can let an authenticated user, after MSCIID discovery, send configuration changes via /cgi-bin/Embe...

Sierra Wireless AirLink ES450 ACEManager Embedded_Ace_Get_Task.cgi Information Disclosure Exploit

An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGetTask.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause an information disclosure, resulting in the exposure of confidential information, including, but...

Sierra Wireless AirLink ES450 ACEManager Embedded_Ace_Get_Task.cgi Information Disclosure

Talos Vulnerability Report TALOS-2018-0755 Sierra Wireless AirLink ES450 ACEManager EmbeddedAceGetTask.cgi Information Disclosure Vulnerability April 25, 2019 CVE Number CVE-2018-4070, CVE-2018-4071 Summary An exploitable Information Disclosure vulnerability exists in the ACEManager...

Sierra Wireless AirLink ES450 ACEManager Embedded_Ace_Get_Task.cgi Information Disclosure Vulnerability

Summary An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGetTask.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause an information disclosure, resulting in the exposure of confidential information,...