Skip to content
OpenAdvisories
Unscored CVE-2018-4068 EUVD-2018-15854GHSA-6j4f-mgx9-pcwf

An exploitable information disclosure vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A HTT…

Published May 6, 2019 · Updated Aug 5, 2024 · Assigned by talos

Description

An exploitable information disclosure vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A HTTP request can result in disclosure of the default configuration for the device. An attacker can send an unauthenticated HTTP request to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
— Sierra Wireless Sierra Wireless AirLink ES450 FW 4.9.3 —

References