PT-2019-10800 · Sierra Wireless · Sierra Wireless Airlink Es450

Published 2019-05-06 · Updated 2019-10-03 · CVE-2018-4073

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sierra Wireless AirLink ES450 FW version 4.9.3

Description A Permission Assignment issue exists in the ACEManager EmbeddedAceSet Task.cgi functionality. The endpoint "/cgi-bin/Embeded Ace TLSet Task.cgi" allows for arbitrary setting writes, resulting in unverified changes to any system setting. An attacker can trigger this issue by making an authenticated HTTP request or running the binary as any user.

Recommendations For Sierra Wireless AirLink ES450 FW version 4.9.3, consider restricting access to the "/cgi-bin/Embeded Ace TLSet Task.cgi" endpoint to minimize the risk of exploitation. As a temporary workaround, avoid using the EmbeddedAceSet Task.cgi functionality until a patch is available.

Exploit

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2018-4073

Affected Products

Sierra Wireless Airlink Es450

References · 3

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2018-0756 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-4073 · Security Note
• https://osv.dev/vulnerability/CVE-2018-4073 · Vendor Advisory