Skip to content
OpenAdvisories
Critical 1 exploited CVE ICSA-19-122-03 6 CVEs

Sierra Wireless AirLink ALEOS (Update B)

Published May 2, 2019 · Updated Apr 23, 2020 · Revision 3

Vendor: Sierra Wireless Product: GX450 and ES450 Product: LS300 GX400 GX440 and ES440 Product: MP70 MP70E RV50 RV50X LX40 and LX60

Summary

Successful exploitation of these vulnerabilities could allow attackers to remotely execute code, discover user credentials, upload files, or discover file paths.

Vulnerabilities 6

  • High 8.8
    CVE-2018-4063 Exploited EPSS 27%

    An exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless AirLink ES…

    KEV Dec 12, 2025
  • Unscored —
    CVE-2018-4061 EPSS 19%

    An exploitable command injection vulnerability exists in the ACEManager iplogging.cgi functionality of Sierra Wireless …

  • Unscored —
    CVE-2018-4062

    A hard-coded credentials vulnerability exists in the snmpd function of the Sierra Wireless AirLink ES450 FW 4.9.3. Acti…

  • Unscored —
    CVE-2018-4066

    An exploitable cross-site request forgery vulnerability exists in the ACEManager functionality of Sierra Wireless AirLi…

  • Unscored —
    CVE-2018-4067

    An exploitable information disclosure vulnerability exists in the ACEManager template_load.cgi functionality of Sierra …

  • Unscored —
    CVE-2018-4069

    An information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLin…

Revision history

  1. #3

    ICSA-19-122-03 Sierra Wireless AirLink ALEOS (Update B)

  2. #2

    ICSA-19-122-03 Sierra Wireless AirLink ALEOS (Update A)

  3. #1

    ICSA-19-122-03 Sierra Wireless AirLink ALEOS

References