Vulnerability CVE-2018-4072

Vulnerability CVE-2018-4072

Published: 2019-05-06

Description:

An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The EmbeddedAceSet_Task.cgi executable is used to change MSCII configuration values within the configuration manager of the AirLink ES450. This binary does not have any restricted configuration settings, so once the MSCIID is discovered, any authenticated user can send configuration changes using the /cgi-bin/Embedded_Ace_Set_Task.cgi endpoint.

See advisories in our WLB2 database:

	Topic	Author	Date
Low	Sierra Wireless AirLink ES450 ACEManager Embedded_Ace_Set_Task.cgi Permission Assignment	Cisco Talos	28.04.2019

Type:

CWE-732

CVSS2 => (AV:N/AC:L/Au:S/C:P/I:P/A:P)

CVSS Base Score	Impact Subscore	Exploitability Subscore
6.5/10	6.4/10	8/10

Exploit range	Attack complexity	Authentication
Remote	Low	Single time
Confidentiality impact	Integrity impact	Availability impact
Partial	Partial	Partial

Affected software
Sierrawireless -> Airlink es450 firmware

References:

https://talosintelligence.com/vulnerability_reports/TALOS-2018-0756

Copyright 2024, cxsecurity.com