CVE-2018-4062

CVSS 3.0: 8.1 high
EPSS: 5%p93
Published: May 6, 2019 · May 6, 2019
Modified: Jun 17, 2026

Analyze CVE-2018-4062 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A hard-coded credentials vulnerability exists in the snmpd function of the Sierra Wireless AirLink ES450 FW 4.9.3. Activating snmpd outside of the WebUI can cause the activation of the hard-coded credentials, resulting in the exposure of a privileged user. An attacker can activate snmpd without any configuration changes to trigger this vulnerability.

Vendors: sierrawireless

Products: airlink es450 firmware

Weakness: CWE-798

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (5.3%)

In the news

2 stories

Other Sierra AirLink router models affected by critical flaws

Security AffairsMay 6, 12:48 UTC · May 6, 2019VulnerabilityCVE-2018-4061 CVE-2018-4063 CVE-2018-4066+42 · 1 read

Vulnerability Spotlight: Multiple vulnerabilities in Sierra Wireless AirLink ES450

Cisco TalosApr 25, 18:06 UTC · Apr 25, 2019VulnerabilityExploitedCVE-2018-4061 CVE-2018-4062 CVE-2018-4063+103