{"api_version":"1","generated_at":"2026-07-24T00:31:19+00:00","cve":"CVE-2018-4069","urls":{"html":"https://cve.report/CVE-2018-4069","api":"https://cve.report/api/cve/CVE-2018-4069.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2018-4069","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-4069"},"summary":{"title":"CVE-2018-4069","description":"An information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The ACEManager authentication functionality is done in plaintext XML to the web server. An attacker can listen to network traffic upstream from the device to capitalize on this vulnerability.","state":"PUBLIC","assigner":"talos-cna@cisco.com","published_at":"2019-05-06 18:29:00","updated_at":"2019-05-07 20:29:00"},"problem_types":["CWE-200"],"metrics":[],"references":[{"url":"https://talosintelligence.com/vulnerability_reports/TALOS-2018-0754","name":"https://talosintelligence.com/vulnerability_reports/TALOS-2018-0754","refsource":"MISC","tags":["Exploit","Third Party Advisory"],"title":"TALOS-2018-0754 ||  Cisco Talos Intelligence Group - Comprehensive Threat Intelligence","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://packetstormsecurity.com/files/152654/Sierra-Wireless-AirLink-ES450-ACEManager-Information-Exposure.html","name":"http://packetstormsecurity.com/files/152654/Sierra-Wireless-AirLink-ES450-ACEManager-Information-Exposure.html","refsource":"MISC","tags":[],"title":"Sierra Wireless AirLink ES450 ACEManager Information Exposure ≈ Packet Storm","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-19-122-03","name":"https://ics-cert.us-cert.gov/advisories/ICSA-19-122-03","refsource":"MISC","tags":[],"title":"Sierra Wireless AirLink ALEOS | ICS-CERT","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/108147","name":"108147","refsource":"BID","tags":[],"title":"Sierra Wireless AirLink ALEOS Multiple Security Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-4069","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-4069","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2018","cve_id":"4069","vulnerable":"-1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"sierrawireless","cpe5":"airlink_es450","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2018","cve_id":"4069","vulnerable":"0","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"sierrawireless","cpe5":"airlink_es450","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2018","cve_id":"4069","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"sierrawireless","cpe5":"airlink_es450_firmware","cpe6":"4.9.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2018","cve_id":"4069","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"sierrawireless","cpe5":"airlink_es450_firmware","cpe6":"4.9.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"data_type":"CVE","data_format":"MITRE","data_version":"4.0","CVE_data_meta":{"ID":"CVE-2018-4069","ASSIGNER":"talos-cna@cisco.com","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"vendor_name":"n/a","product":{"product_data":[{"product_name":"Sierra Wireless","version":{"version_data":[{"version_value":"Sierra Wireless AirLink ES450 FW 4.9.3"}]}}]}}]}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Missing Encryption of Sensitive Data"}]}]},"references":{"reference_data":[{"refsource":"MISC","name":"http://packetstormsecurity.com/files/152654/Sierra-Wireless-AirLink-ES450-ACEManager-Information-Exposure.html","url":"http://packetstormsecurity.com/files/152654/Sierra-Wireless-AirLink-ES450-ACEManager-Information-Exposure.html"},{"refsource":"MISC","name":"https://ics-cert.us-cert.gov/advisories/ICSA-19-122-03","url":"https://ics-cert.us-cert.gov/advisories/ICSA-19-122-03"},{"refsource":"BID","name":"108147","url":"http://www.securityfocus.com/bid/108147"},{"refsource":"MISC","name":"https://talosintelligence.com/vulnerability_reports/TALOS-2018-0754","url":"https://talosintelligence.com/vulnerability_reports/TALOS-2018-0754"}]},"description":{"description_data":[{"lang":"eng","value":"An information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The ACEManager authentication functionality is done in plaintext XML to the web server. An attacker can listen to network traffic upstream from the device to capitalize on this vulnerability."}]}},"nvd":{"publishedDate":"2019-05-06 18:29:00","lastModifiedDate":"2019-05-07 20:29:00","problem_types":["CWE-200"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5},"severity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"AND","children":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:sierrawireless:airlink_es450_firmware:4.9.3:*:*:*:*:*:*:*","cpe_name":[]}]},{"operator":"OR","children":[],"cpe_match":[{"vulnerable":false,"cpe23Uri":"cpe:2.3:h:sierrawireless:airlink_es450:-:*:*:*:*:*:*:*","cpe_name":[]}]}],"cpe_match":[]}]}},"legacy_mitre":{"record":{"CveYear":"2018","CveId":"4069","Ordinal":"119983","Title":"CVE-2018-4069","CVE":"CVE-2018-4069","Year":"2018"},"notes":[{"CveYear":"2018","CveId":"4069","Ordinal":"1","NoteData":"An information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The ACEManager authentication functionality is done in plaintext XML to the web server. An attacker can listen to network traffic upstream from the device to capitalize on this vulnerability.","Type":"Description","Title":null},{"CveYear":"2018","CveId":"4069","Ordinal":"2","NoteData":"2019-05-06","Type":"Other","Title":"Published"},{"CveYear":"2018","CveId":"4069","Ordinal":"3","NoteData":"2019-05-07","Type":"Other","Title":"Modified"}]}}}