Sierra Wireless AirLink ES450 Cross-Site Request Forgery Vulnerability

The Sierra Wireless AirLink ES450 is a cellular network modem device from Sierra Wireless Canada. A cross-site request forgery vulnerability exists in the ACEManager feature in the Sierra Wireless AirLink ES450 using firmware version 4.9.3. The vulnerability stems from the WEB application not...