what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Sierra Wireless AirLink ES450 ACEManager upload.cgi Remote Code Execution

Posted Apr 26, 2019

Authored by Cisco Talos, Carl Hurd

An exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can upload a file, resulting in executable code being uploaded, and routable, to the webserver. An attacker can make an authenticated HTTP request to trigger this vulnerability.

tags | exploit, remote, web, cgi, code execution

advisories | CVE-2018-4063

SHA-256 | 94904005a117eb6fda194315d152fd94ea44aa87006ebcb29834bdb9395935ce

Download | Favorite | View

Related Files

No related files