CVE-2018-4064

2019-10-3120:24:12

talos

www.cve.org

EPSS

0.002

Percentile

61.9%

JSON

An exploitable unverified password change vulnerability exists in the ACEManager upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause a unverified device configuration change, resulting in an unverified change of the user password on the device. An attacker can make an authenticated HTTP request to trigger this vulnerability.

CNA Affected

[
  {
    "product": "Sierra Wireless",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Sierra Wireless AirLink ES450 FW 4.9.3"
      }
    ]
  }
]

References

talosintelligence.com/vulnerability_reports/TALOS-2018-0749

EPSS

0.002

Percentile

61.9%

JSON

Related for CVELIST:CVE-2018-4064