CVE-2018-4062
Sierra Wireless AirLink ES450 SNMPD Hard-Coded Credentials
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
2Exploited in Wild
-Decision
Descriptions
A hard-coded credentials vulnerability exists in the snmpd function of the Sierra Wireless AirLink ES450 FW 4.9.3. Activating snmpd outside of the WebUI can cause the activation of the hard-coded credentials, resulting in the exposure of a privileged user. An attacker can activate snmpd without any configuration changes to trigger this vulnerability.
Existe una vulnerabilidad de credenciales embebidas en la función snmpd del Sierra Wireless AirLink ES450 FW 4.9.3. La activación de snmpd fuera de la interfaz WebUI puede causar la activación de las credenciales embebidas, que dará como resultado la exposición de un usuario privilegiado. Un atacante puede activar snmpd sin ningún cambio de configuración para desencadenar esta vulnerabilidad.
A hard-coded credentials vulnerability exists in the snmpd function of the Sierra Wireless AirLink ES450 FW 4.9.3. Activating snmpd outside of the WebUI can cause the activation of the hard-coded credentials, resulting in a hard-coded, in the exposure of a privileged user. An attacker can activate snmpd without any configuration changes to trigger this vulnerability.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2018-01-02 CVE Reserved
- 2019-04-26 CVE Published
- 2024-08-05 CVE Updated
- 2024-08-05 First Exploit
- 2024-10-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-798: Use of Hard-coded Credentials
CAPEC
References (4)
URL | Tag | Source |
---|---|---|
http://www.securityfocus.com/bid/108147 | Third Party Advisory | |
https://ics-cert.us-cert.gov/advisories/ICSA-19-122-03 | Third Party Advisory |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Sierrawireless Search vendor "Sierrawireless" | Airlink Es450 Firmware Search vendor "Sierrawireless" for product "Airlink Es450 Firmware" | 4.9.3 Search vendor "Sierrawireless" for product "Airlink Es450 Firmware" and version "4.9.3" | - |
Affected
| in | Sierrawireless Search vendor "Sierrawireless" | Airlink Es450 Search vendor "Sierrawireless" for product "Airlink Es450" | - | - |
Safe
|