PT-2019-10790 · Sierra Wireless · Sierra Wireless Airlink Es450

Carl Hurd + 1 · Published 2019-05-06 · Updated 2025-12-15 · CVE-2018-4063

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sierra Wireless AirLink ES450 version 4.9.3 Sierra Wireless AirLink ALEOS (affected versions not specified)

Description A remote code execution issue exists in the upload.cgi functionality of Sierra Wireless AirLink devices. A crafted HTTP request can upload a file, leading to executable code being uploaded and accessible on the webserver. An authenticated attacker can trigger this issue. Recent attacks have leveraged this to deliver malware, including botnets and cryptocurrency miners. The vulnerability allows attackers to execute arbitrary code on affected routers, potentially leveraging administrative privileges. The vulnerability is actively exploited in the wild. The upload.cgi functionality is vulnerable to unrestricted file uploads.

Recommendations Sierra Wireless AirLink ES450 version 4.9.3: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Sierra Wireless AirLink ALEOS: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2018-4063

Affected Products

Sierra Wireless Airlink Es450

References · 18

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2018-0748 · Exploit
• 🔥 http://packetstormsecurity.com/files/152648/Sierra-Wireless-AirLink-ES450-ACEManager-upload.cgi-Remote-Code-Execution.html · Exploit
• 🔥 https://forescout.com/blog/ot-network-security-threats-industrial-routers-under-attack · Exploit
• https://cisa.gov/news-events/ics-advisories/icsa-19-122-03 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-4063 · Security Note
• https://source.sierrawireless.com/resources/airlink/hardware_reference_docs/airlink_es450_eol · Security Note
• https://source.sierrawireless.com/resources/airlink/software_reference_docs/technical-bulletin/sierra-wireless-technical-bulletin---swi-psa-2019-003 · Security Note
• https://osv.dev/vulnerability/CVE-2018-4063 · Vendor Advisory
• https://t.me/aptreports/24482 · Telegram Post
• https://twitter.com/DarkWebInformer/status/1999625216943882405 · Twitter Post
• https://ics-cert.us-cert.gov/advisories/ICSA-19-122-03 · Note
• https://t.me/cveNotify/145673 · Telegram Post
• https://t.me/cveNotify/145766 · Telegram Post
• https://t.me/cveNotify/145620 · Telegram Post
• https://reddit.com/r/pwnhub/comments/1plpqq6/sierra_wireless_router_flaw_allows_remote_code · Reddit Post