CVE-2018-4073

ÉLEVÉE 8.8CVE-2018-4073 · Published 06/05/2019 · updated 17/06/2026

En bref

CVE-2018-4073 est une vulnérabilité ÉLEVÉE (CVSS 8.8).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 25.6%, plus élevée que 98.0% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The the binary the endpoint /cgi-bin/Embeded_Ace_TLSet_Task.cgi is a very similar endpoint that is designed for use with setting table values that can cause an arbitrary setting writes, resulting in the unverified changes to any system setting. An attacker can make an authenticated HTTP request, or run the binary as any user, to trigger this vulnerability.

References

talosintelligence.com/vulnerability_reports/TALOS-2018-0756 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free