CVE-2018-4067: falha em Sierra Wireless
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 4.1%
An exploitable information disclosure vulnerability exists in the ACEManager template_load.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause a information leak, resulting in the disclosure of internal paths and files. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Produtos afetados
n/a · Sierra WirelessReferências
http://packetstormsecurity.com/files/152652/Sierra-Wireless-AirLink-ES450-ACEManager-template_load.cgi-Information-Disclosure.htmlhttps://ics-cert.us-cert.gov/advisories/ICSA-19-122-03https://talosintelligence.com/vulnerability_reports/TALOS-2018-0752http://www.securityfocus.com/bid/108147