Vulnerability Details CVE-2018-4068
An exploitable information disclosure vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A HTTP request can result in disclosure of the default configuration for the device. An attacker can send an unauthenticated HTTP request to trigger this vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.114
EPSS Ranking 95.5%
CVSS Severity
CVSS v3 Score 5.3
CVSS v2 Score 5.0
References
Products affected by CVE-2018-4068
-
cpe:2.3:h:sierrawireless:airlink_es450:-
-
cpe:2.3:o:sierrawireless:airlink_es450_firmware:4.9.3