CVE-2018-4071

CVE-2018-4071 affects Sierra Wireless AirLink ES450 FW 4.9.3. The ACEManager Embedded_Ace_Get_Task.cgi information-disclosure vulnerability allows an authenticated user (or the binary itself) via /cgi-bin/Embedded_Ace_TLGet_Task.cgi to access sensitive data, including plaintext passwords and SNMP...

Sierra Wireless AirLink ES450 ACEManager Embedded_Ace_Get_Task.cgi Information Disclosure Exploit

An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGetTask.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause an information disclosure, resulting in the exposure of confidential information, including, but...

Sierra Wireless AirLink ES450 ACEManager Embedded_Ace_Get_Task.cgi Information Disclosure

Talos Vulnerability Report TALOS-2018-0755 Sierra Wireless AirLink ES450 ACEManager EmbeddedAceGetTask.cgi Information Disclosure Vulnerability April 25, 2019 CVE Number CVE-2018-4070, CVE-2018-4071 Summary An exploitable Information Disclosure vulnerability exists in the ACEManager...

Sierra Wireless AirLink ES450 ACEManager Embedded_Ace_Get_Task.cgi Information Disclosure Vulnerability

Summary An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGetTask.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause an information disclosure, resulting in the exposure of confidential information,...