9

CVE-2018-4063

Warnung
Exploit
An exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can upload a file, resulting in executable code being uploaded, and routable, to the webserver. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sierrawireless ≫ Aleos Version < 4.4.9
   Sierrawireless ≫ Airlink Es440 Version -
   Sierrawireless ≫ Airlink Gx400 Version -
   Sierrawireless ≫ Airlink Gx440 Version -
   Sierrawireless ≫ Airlink Ls300 Version -
Sierrawireless ≫ Aleos Version < 4.11.0
   Sierrawireless ≫ Airlink Lx40 Version -
   Sierrawireless ≫ Airlink Lx60 Version -
   Sierrawireless ≫ Airlink Mp70 Version -
   Sierrawireless ≫ Airlink Mp70e Version -
   Sierrawireless ≫ Airlink Rv50 Version -
   Sierrawireless ≫ Airlink Rv50x Version -
Sierrawireless ≫ Aleos Version < 4.9.4
   Sierrawireless ≫ Airlink Es450 Version -
   Sierrawireless ≫ Airlink Gx450 Version -

12.12.2025: CISA Known Exploited Vulnerabilities (KEV) Catalog

Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability

Schwachstelle

Sierra Wireless AirLink ALEOS contains an unrestricted upload of file with dangerous type vulnerability. A specially crafted HTTP request can upload a file, resulting in executable code being uploaded, and routable, to the webserver. An attacker can make an authenticated HTTP request to trigger this vulnerability. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

Beschreibung

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 27.51% 0.979
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 9 8 10
AV:N/AC:L/Au:S/C:C/I:C/A:C
CISA-ADP 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-434 Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

http://www.securityfocus.com/bid/108147
Broken Link
https://ics-cert.us-cert.gov/advisories/ICSA-19-122-03
Third Party Advisory
US Government Resource
http://packetstormsecurity.com/files/152648/Sierra-Wireless-AirLink-ES450-ACEManager-upload.cgi-Remote-Code-Execution.html
Exploit
VDB Entry
https://talosintelligence.com/vulnerability_reports/TALOS-2018-0748
Third Party Advisory
Exploit
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-4063
US Government Resource
https://www.forescout.com/blog/ot-network-security-threats-industrial-routers-under-attack/
Third Party Advisory
Exploit