CVE-2018-4069

An information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLink ES450 FW 4.9.3

published May 6, 2019

CVSS
—
EPSS
4%
Percentile
90.6
In the wild
Unconfirmed
What it is

An information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The ACEManager authentication functionality is done in plaintext XML to the web server. An attacker can listen to network traffic upstream from the device to capitalize on this vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04065 · 90.6th percentile
Published
2019-05-06T17:42Z
EPSS history
Timeline
  • 06 MAY 17:42Z
    An information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLink ES450 FW 4.9.3
    cvelistv5