Vendors / SierraWireless Records 56 All Threatist records
Exploited (KEV) 1
CVSS critical 15
CVSS high 32
Exploited now SierraWireless records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 60
An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3.
CVSS 3.0 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.25634 · Published 2019-05-06 · No fix listed CWE-732
Priority MEDIUM 60
An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3.
CVSS 3.0 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.26431 · Published 2019-05-06 · No fix listed CWE-732
Priority MEDIUM 56
An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3.
CVSS 3.0 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.18324 · Published 2019-05-06 · No fix listed CWE-200
Priority MEDIUM 56
An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3.
CVSS 3.0 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.1797 · Published 2019-05-06 · No fix listed CWE-200
Priority MEDIUM 56
An exploitable command injection vulnerability exists in the ACEManager iplogging.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3.
CVSS 3.0 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.19488 · Published 2019-05-06 · No fix listed CWE-78
Priority MEDIUM 47
An exploitable unverified password change vulnerability exists in the ACEManager upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3.
CVSS 3.1 HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.14478 · Published 2019-10-31 · No fix listed CWE-287
Priority MEDIUM 43
A hard-coded credentials vulnerability exists in the snmpd function of the Sierra Wireless AirLink ES450 FW 4.9.3.
CVSS 3.0 HIGH 8.1· Network · No auth · No interaction · EPSS 0.05324 · Published 2019-05-06 · No fix listed CWE-798
Priority MEDIUM 42
An exploitable cross-site request forgery vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink ES450 FW 4.9.3.
CVSS 3.0 HIGH 8.8· Network · No auth · User interaction · EPSS 0.01912 · Published 2019-05-06 · No fix listed CWE-352
Priority MEDIUM 40
An information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLink ES450 FW 4.9.3.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.04065 · Published 2019-05-06 · No fix listed CWE-200
Priority LOW 37
An exploitable information disclosure vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink ES450 FW 4.9.3.
CVSS 3.0 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.11396 · Published 2019-05-06 · No fix listed CWE-200
Priority LOW 36
An exploitable information disclosure vulnerability exists in the ACEManager template_load.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3.
CVSS 3.0 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0411 · Published 2019-05-06 · No fix listed CWE-200
Priority LOW 35
An exploitable cross-site scripting vulnerability exists in the ACEManager ping_result.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.04858 · Published 2019-05-06 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
15 32 8 1 0
THREATIST.IORead the docs