Actively exploited · Published May 6, 2019 · Assigned by talos
CVE-2018-4063
High 8.8 Exploited
In plain English
A high-severity unrestricted file upload in Sierra Wireless. Attackers are actively exploiting it in the wild (listed by CISA on December 12, 2025). The chance it is exploited in the next 30 days is estimated at 27.3% (higher than 98% of all known vulnerabilities). Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CISA guidance
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Federal agencies must remediate by Jan 2, 2026.
Official description
An exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can upload a file, resulting in executable code being uploaded, and routable, to the webserver. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Sierra Wireless | Sierra Wireless AirLink ES450 FW 4.9.3 |
Weakness: CWE-434 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- http://packetstormsecurity.com/files/152648/Sierra-Wireless-AirLink-ES450-ACEManager-upload.cgi-Remote-Code-Execution.html x_refsource_MISC
- https://ics-cert.us-cert.gov/advisories/ICSA-19-122-03 x_refsource_MISC
- 108147 vdb-entry, x_refsource_BID
- https://talosintelligence.com/vulnerability_reports/TALOS-2018-0748 x_refsource_MISC
- https://www.forescout.com/blog/ot-network-security-threats-industrial-routers-under-attack/ third-party-advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-4063 government-resource