CVE-2018-4067: Sierra Wireless AirLink ES450 Firmware

Medium severity, CVSS 6.5. EPSS: 4.1% chance of exploitation in the next 30 days.

An exploitable information disclosure vulnerability exists in the ACEManager template_load.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause a information leak, resulting in the disclosure of internal paths and files. An attacker can make an authenticated HTTP request to trigger this vulnerability.

Affected products

• Sierra Wireless AirLink ES450 Firmware: version 4.9.3 only

Published 2019-05-06. Last modified 2026-06-17.