CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2019-05-06
Sierra Wireless AirLink ES450 Gateway upload.cgi Arbitrary File Upload and Remote Code Execution (RCE) Vulnerability (CVE-2018-4063)
[Affected Scope] Sierra Wireless AirLink ES450 firmware version 4.9.3 and its ACEManager web interface
[Impact] An authenticated attacker can upload arbitrary executable files via a crafted HTTP POST request, leading to remote code execution with system privileges
[Mitigation] Apply the latest official firmware security patches and restrict external internet access to the ACEManager interface