High severity7.5NVD Advisory· Published May 6, 2019· Updated Jun 17, 2026

CVE-2018-4069

Description

An information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The ACEManager authentication functionality is done in plaintext XML to the web server. An attacker can listen to network traffic upstream from the device to capitalize on this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Sierra Wireless/AirLink ES450description
Sierrawireless/AirLink ES450llm-fuzzy
Range: FW 4.9.3

Patches

Vulnerability mechanics

References

talosintelligence.com/vulnerability_reports/TALOS-2018-0754nvdExploitThird Party Advisory
packetstormsecurity.com/files/152654/Sierra-Wireless-AirLink-ES450-ACEManager-Information-Exposure.htmlnvd
www.securityfocus.com/bid/108147nvd
ics-cert.us-cert.gov/advisories/ICSA-19-122-03nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000