CVE-2018-10251

Vulnerability

The vulnerability affects Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware before 4.4.7, and GX450, ES450, RV50, RV50X, MP70, and MP70E routers with firmware before 4.9.3 [1]. It allows an unauthenticated remote attacker to execute arbitrary code on the device.

Exploitation

An attacker can exploit this vulnerability by sending specially crafted requests to an affected device that is directly reachable from the public internet, without requiring authentication [1]. Sierra Wireless has observed the IoTroop/Reaper malware exploiting this vulnerability using default user or viewer passwords [1].

Impact

Successful exploitation grants the attacker full control of the affected system, including the ability to issue commands with root privileges [1]. This can lead to complete device compromise and potential use in botnet activities.

Mitigation

The fix is included in firmware versions 4.4.7 and 4.9.3 respectively, as indicated in Sierra Wireless Technical Bulletin SWI-PSA-2018-005 [1]. Users should update to these versions. As a workaround, ensure devices are not directly reachable from the public internet and change default passwords [1].