CVSS: 8.8EPSS: 5%CPEs: 2EXPL: 1CVE-2018-4073
https://notcve.org/view.php?id=CVE-2018-4073
An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The the binary the endpoint /cgi-bin/Embeded_Ace_TLSet_Task.cgi is a very similar endpoint that is designed for use with setting table values that can cause an arbitrary setting writes, resulting in the unverified changes to any system setting. An attacker can make an authenticated HTTP request, or run the binary as any user, to trigger this vulnerability. Existe una vulnerabilidad explotable de Asignación de Permisos en la funcionalidad de ACEManager EmbeddedAceSet_Task.cgi de Sierra Wireless AirLink ES450 FW 4.9.3. El binario del endpoint /cgi-bin/Embeded_Ace_TLSet_Task.cgi es muy similar al endpoint que está diseñado para usar la tabla de valores de configuración que puede causar la escritura de ajustes aleatorios, resultando en cambios no verificados en cualquier configuración del sistema. • https://talosintelligence.com/vulnerability_reports/TALOS-2018-0756 • CWE-732: Incorrect Permission Assignment for Critical Resource •
CVSS: 8.8EPSS: 5%CPEs: 2EXPL: 1CVE-2018-4072
https://notcve.org/view.php?id=CVE-2018-4072
An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The EmbeddedAceSet_Task.cgi executable is used to change MSCII configuration values within the configuration manager of the AirLink ES450. This binary does not have any restricted configuration settings, so once the MSCIID is discovered, any authenticated user can send configuration changes using the /cgi-bin/Embedded_Ace_Set_Task.cgi endpoint. Existe una vulnerabilidad explotable de Asignación de Permisos en la funcionalidad de ACEManager EmbeddedAceSet_Task.cgi de Sierra Wireless AirLink ES450 FW 4.9.3. El ejecutable EmbeddedAceSet_Task.cgi se utiliza para cambiar los valores de configuración MSCII dentro del gestor de configuración del AirLink ES450. • https://talosintelligence.com/vulnerability_reports/TALOS-2018-0756 • CWE-732: Incorrect Permission Assignment for Critical Resource •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 1CVE-2018-4069 – Sierra Wireless AirLink ES450 ACEManager Information Exposure
https://notcve.org/view.php?id=CVE-2018-4069
An information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The ACEManager authentication functionality is done in plaintext XML to the web server. An attacker can listen to network traffic upstream from the device to capitalize on this vulnerability. Existe una vulnerabilidad de divulgación de información en la funcionalidad de autenticación ACEManager de Sierra Wireless AirLink ES450 FW 4.9.3. La funcionalidad de autenticación de ACEManager se realiza en texto plano XML al servidor web. • http://packetstormsecurity.com/files/152654/Sierra-Wireless-AirLink-ES450-ACEManager-Information-Exposure.html http://www.securityfocus.com/bid/108147 https://ics-cert.us-cert.gov/advisories/ICSA-19-122-03 https://talosintelligence.com/vulnerability_reports/TALOS-2018-0754 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 1CVE-2018-4067 – Sierra Wireless AirLink ES450 ACEManager template_load.cgi Information Disclosure
https://notcve.org/view.php?id=CVE-2018-4067
An exploitable information disclosure vulnerability exists in the ACEManager template_load.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause a information leak, resulting in the disclosure of internal paths and files. An attacker can make an authenticated HTTP request to trigger this vulnerability. Existe una vulnerabilidad de divulgación de información explotable en la funcionalidad template_load.cgi de ACEManager de Sierra Wireless AirLink ES450 FW 4.9.3. Una petición HTTP especialmente diseñada puede causar una fuga de información, lo que resulta en la divulgación de rutas y archivos internos. • http://packetstormsecurity.com/files/152652/Sierra-Wireless-AirLink-ES450-ACEManager-template_load.cgi-Information-Disclosure.html http://www.securityfocus.com/bid/108147 https://ics-cert.us-cert.gov/advisories/ICSA-19-122-03 https://talosintelligence.com/vulnerability_reports/TALOS-2018-0752 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 8.8EPSS: 9%CPEs: 2EXPL: 1CVE-2018-4070 – Sierra Wireless AirLink ES450 ACEManager Embedded_Ace_Get_Task.cgi Information Disclosure
https://notcve.org/view.php?id=CVE-2018-4070
An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. This binary does not have any restricted configuration settings, so once the MSCIID is discovered, any authenticated user can send configuration changes using the /cgi-bin/Embedded_Ace_Get_Task.cgi endpoint. Existe una vulnerabilidad explotable de divulgación de información en la funcionalidad de ACEManager EmbeddedAceGet_Task.cgi de Sierra Wireless AirLink ES450 FW 4.9.3. Este binario no tiene ninguna configuración restringida, por lo que una vez que se descubre el MSCIID, cualquier usuario autenticado puede enviar cambios de configuración utilizando el endpoint /cgi-bin/Embedded_Ace_Get_Task.cgi. • https://talosintelligence.com/vulnerability_reports/TALOS-2018-0755 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •