Security Advisory

CVE-2018-4067

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-05-06 18:50:04

Last updated 2024-08-05 05:04:28

Assigner talos

CVSS score not scored

State PUBLISHED

Description

An exploitable information disclosure vulnerability exists in the ACEManager template_load.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause a information leak, resulting in the disclosure of internal paths and files. An attacker can make an authenticated HTTP request to trigger this vulnerability.

← Browse all CVEs View on cve.org ↗