An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Sierra Wireless AirLi…

Published 7 y ago 2019-05-06 · modified 4 mo ago 2026-06-17 · JSON

CVSS

8.8

v3.0 · NVD

CISA KEV

not known exploited

EPSS

18.3%

percentile 97%

Public exploits

none known

An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The EmbeddedAceTLGet_Task.cgi executable is used to retrieve MSCII configuration values within the configuration manager of the AirLink ES450. This binary does not have any restricted configuration settings, so once the MSCIID is discovered, any authenticated user can send configuration changes using the /cgi-bin/Embedded_Ace_TLGet_Task.cgi endpoint.

Exploit prediction (EPSS)

18.32% probability of exploitation in the next 30 days, higher than 97% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
NVD	3.0	8.8	`CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
NVD	2.0	4.0	`AV:N/AC:L/Au:S/C:P/I:N/A:N`

Affected products

n/a Sierra Wireless

Classification

Weakness

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References

talosintelligence.com /vulnerability_reports/TALOS-2018-0755 · x_refsource_MISC, x_transferred

Sources

CVE List: CVE-2018-4071
NVD: CVE-2018-4071

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.