Vulnerabilitycritical

Other Sierra AirLink router models affected by critical flaws

Security Affairsby @securityaffairsMay 6, 2019 · 12:48 UTC (May 6, 2019)2 min read2 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2018-4061 CVE-2018-4063 CVE-2018-4066 CVE-2018-4062 CVE-2018-4065 CVE-2018-4069 CVE-2018-4067

Tags: cve-2018-4061 cve-2018-4063 cve-2018-4066 cve-2018-4062 cve-2018-4065 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-4061 +5 related CVEs CVE-2018-4066 CVE-2018-4062 CVE-2018-4069 CVE-2018-4067 CVE-2018-4065	An exploitable command injection vulnerability exists in the ACEManager iplogging.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3	8.8 group max	19%	PoC	May 6, 2019
CVE-2018-4063	Unrestricted File Upload Leading to Code Execution in Sierra Wireless AirLink ALEOS	8.8	27%	KEVPoC ×3	May 6, 2019 KEV Dec 12, 2025

From the original article

2 min read at securityaffairs.com

Sierra Wireless is warning its customers that additional AiraLink router models are affected by critical vulnerabilities previously disclosed. At the end of April, experts at Cisco Talos group disclosed a dozen of vulnerabilities in Sierra Wireless AirLink gateways and routers, including several serious flaws.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.