Vulnerabilities CVE-2018-4063

CVE-2018-4063

Medium

Open

KEV

TLP:CLEAR

Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability

NVD CVE.org

Ransomware

AI Analysis

No AI analysis yet.

Description

An exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can upload a file, resulting in executable code being uploaded, and routable, to the webserver. An attacker can make an authenticated HTTP request to trigger this vulnerability.

Details

EPSS Score ⓘ: 27.51%

97.9th percentile
Confidence: 100%
Published: May 6, 2019
Last Modified: May 22, 2026
CISA KEV
Date Added: Dec 12, 2025
Patch Due: Jan 2, 2026
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.