Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

12 records

Vendor: SierraWireless Component: Airlink Es450 Firmware Clear all filters
TI-2018-03030 CVE-2018-4064 · GHSA-653p-mrq2-3gw2

Improper authentication in Sierra Wireless

Priority MEDIUM 47

An exploitable unverified password change vulnerability exists in the ACEManager upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.14478 Published 2019-10-31 No fix listed CWE-287
TI-2018-03033 CVE-2018-4067 · GHSA-q6wp-52wj-895x

Information disclosure in Sierra Wireless

Priority LOW 36

An exploitable information disclosure vulnerability exists in the ACEManager template_load.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0411 Published 2019-05-06 No fix listed CWE-200
TI-2018-03032 CVE-2018-4066 · GHSA-qpw3-hm3x-9p9q

Cross-site request forgery in Sierra Wireless

Priority MEDIUM 42

An exploitable cross-site request forgery vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink ES450 FW 4.9.3.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01912 Published 2019-05-06 No fix listed CWE-352
TI-2018-03028 CVE-2018-4062 · GHSA-x7qh-pj6r-h933

Hard-coded credentials in Sierra Wireless

Priority MEDIUM 43

A hard-coded credentials vulnerability exists in the snmpd function of the Sierra Wireless AirLink ES450 FW 4.9.3.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.05324 Published 2019-05-06 No fix listed CWE-798
TI-2018-03039 CVE-2018-4073 · GHSA-4mhq-mfhv-hjcw

Incorrect permission assignment in Sierra Wireless

Priority MEDIUM 60

An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.25634 Published 2019-05-06 No fix listed CWE-732
TI-2018-03038 CVE-2018-4072 · GHSA-583c-3965-f379

Incorrect permission assignment in Sierra Wireless

Priority MEDIUM 60

An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.26431 Published 2019-05-06 No fix listed CWE-732
TI-2018-03037 CVE-2018-4071 · GHSA-3pw3-6rxr-cp65

Information disclosure in Sierra Wireless

Priority MEDIUM 56

An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.18324 Published 2019-05-06 No fix listed CWE-200
TI-2018-03036 CVE-2018-4070 · GHSA-gjg4-7jjq-6gg3

Information disclosure in Sierra Wireless

Priority MEDIUM 56

An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.1797 Published 2019-05-06 No fix listed CWE-200
TI-2018-03031 CVE-2018-4065 · GHSA-j2r3-rxw6-4cr5

Cross-site scripting in Sierra Wireless

Priority LOW 35

An exploitable cross-site scripting vulnerability exists in the ACEManager ping_result.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.04858 Published 2019-05-06 No fix listed CWE-79
TI-2018-03027 CVE-2018-4061 · GHSA-2h39-9475-px89

OS command injection in Sierra Wireless

Priority MEDIUM 56

An exploitable command injection vulnerability exists in the ACEManager iplogging.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.19488 Published 2019-05-06 No fix listed CWE-78
TI-2018-03034 CVE-2018-4068 · GHSA-6j4f-mgx9-pcwf

Information disclosure in Sierra Wireless

Priority LOW 37

An exploitable information disclosure vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink ES450 FW 4.9.3.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.11396 Published 2019-05-06 No fix listed CWE-200
TI-2018-03035 CVE-2018-4069 · GHSA-22gr-gpph-j2c5

Information disclosure in Sierra Wireless

Priority MEDIUM 40

An information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLink ES450 FW 4.9.3.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.04065 Published 2019-05-06 No fix listed CWE-200