Sierrawireless Airlink Es450 Firmware 4.9.3
Approved changes feed: RSS · Atom
cpe:2.3:o:sierrawireless:airlink_es450_firmware:4.9.3:*:*:*:*:*:*:*
part: o version: 4.9.3 update: *
| Vendor | Sierrawireless (aaf230a0-10d0-5e89-a0f6-f9dd63c0f7a4) |
|---|---|
| Product | Airlink Es450 Firmware (e6707296-a022-5a9d-8a15-24cb4ea0035f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-4073 |
vulnerable | 2026-06-08 05:11:41.644157 |
Details available
An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The the binary the endpoint /cgi-bin/Embeded_Ace_TLSet_Task.cgi is a very similar endpoint that is designed for use with setting table values that can cause an arbitrary setting writes, resulting in the unverified changes to any system setting. An attacker can make an authenticated HTTP request, or run the binary as any user, to trigger this vulnerability.
Published: 2019-05-06T18:22:09.000Z
Updated: 2024-08-05T05:04:29.622Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-4072 |
vulnerable | 2026-06-08 05:11:41.643674 |
Details available
An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The EmbeddedAceSet_Task.cgi executable is used to change MSCII configuration values within the configuration manager of the AirLink ES450. This binary does not have any restricted configuration settings, so once the MSCIID is discovered, any authenticated user can send configuration changes using the /cgi-bin/Embedded_Ace_Set_Task.cgi endpoint.
Published: 2019-05-06T18:21:13.000Z
Updated: 2024-08-05T05:04:29.473Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-4071 |
vulnerable | 2026-06-08 05:11:41.643263 |
Details available
An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The EmbeddedAceTLGet_Task.cgi executable is used to retrieve MSCII configuration values within the configuration manager of the AirLink ES450. This binary does not have any restricted configuration settings, so once the MSCIID is discovered, any authenticated user can send configuration changes using the /cgi-bin/Embedded_Ace_TLGet_Task.cgi endpoint.
Published: 2019-05-06T18:15:42.000Z
Updated: 2024-08-05T05:04:28.991Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-4070 |
vulnerable | 2026-06-08 05:11:41.642760 |
Details available
An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. This binary does not have any restricted configuration settings, so once the MSCIID is discovered, any authenticated user can send configuration changes using the /cgi-bin/Embedded_Ace_Get_Task.cgi endpoint.
Published: 2019-05-06T18:15:09.000Z
Updated: 2024-08-05T05:04:28.828Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-4069 |
vulnerable | 2026-06-08 05:11:41.642322 |
Details available
An information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The ACEManager authentication functionality is done in plaintext XML to the web server. An attacker can listen to network traffic upstream from the device to capitalize on this vulnerability.
Published: 2019-05-06T17:42:02.000Z
Updated: 2024-08-05T05:04:28.890Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-4068 |
vulnerable | 2026-06-08 05:11:41.641874 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-4067 |
vulnerable | 2026-06-08 05:11:41.641455 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-4066 |
vulnerable | 2026-06-08 05:11:41.641087 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-4065 |
vulnerable | 2026-06-08 05:11:41.640715 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-4064 |
vulnerable | 2026-06-08 05:11:41.640131 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-4063 |
vulnerable | 2026-06-08 05:11:41.631395 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-4062 |
vulnerable | 2026-06-08 05:11:41.630675 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-4061 |
vulnerable | 2026-06-08 05:11:41.629217 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.