Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-4062

Опубликовано: 06 мая 2019
Источник: nvd
CVSS3: 8.1
CVSS2: 9.3
EPSS Низкий

Описание

A hard-coded credentials vulnerability exists in the snmpd function of the Sierra Wireless AirLink ES450 FW 4.9.3. Activating snmpd outside of the WebUI can cause the activation of the hard-coded credentials, resulting in the exposure of a privileged user. An attacker can activate snmpd without any configuration changes to trigger this vulnerability.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:sierrawireless:airlink_es450_firmware:4.9.3:*:*:*:*:*:*:*
cpe:2.3:h:sierrawireless:airlink_es450:-:*:*:*:*:*:*:*

EPSS

Процентиль: 53%
0.00306
Низкий

8.1 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-798

Связанные уязвимости

CVSS3: 8.1
github
больше 3 лет назад

A hard-coded credentials vulnerability exists in the snmpd function of the Sierra Wireless AirLink ES450 FW 4.9.3. Activating snmpd outside of the WebUI can cause the activation of the hard-coded credentials, resulting in the exposure of a privileged user. An attacker can activate snmpd without any configuration changes to trigger this vulnerability.

EPSS

Процентиль: 53%
0.00306
Низкий

8.1 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-798