60
CVE-2018-4067
- CVSS 3.0
- 6.5 medium
- EPSS
- 4%p90
- Published
- ·
- Modified
Description · NVD
An exploitable information disclosure vulnerability exists in the ACEManager template_load.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause a information leak, resulting in the disclosure of internal paths and files. An attacker can make an authenticated HTTP request to trigger this vulnerability.
- Vendors
- sierrawireless
- Products
- airlink es450 firmware
- Weakness
- CWE-200
- Vector
- CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N