CVE-2018-10251

A vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware before 4.4.7 and GX450, ES450, RV50, RV50X, MP70, and MP70E routers with firmware before 4.9.3 could allow an unauthenticated remote attacker to execute arbitrary code and gain full control of an affected system, including issuing commands with root privileges.

CVSS v3 9.8 CRITICAL
CVSS v2.0 10.0 HIGH

9.8^/10

CVSS v3 : CRITICAL

Vector : AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
https://source.sierrawireless.com/resources/airlink/software_reference_docs/technical-bulletin/sierra-wireless-technical-bulletin---cve-2018-10251/	Mitigation Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:sierrawireless:aleos:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:sierrawireless:es440:-:::::::*
	cpe:2.3:h:sierrawireless:gx400:-:::::::*
	cpe:2.3:h:sierrawireless:gx440:-:::::::*
	cpe:2.3:h:sierrawireless:ls300:-:::::::*

Configuration 2 (hide)

AND

cpe:2.3:o:sierrawireless:aleos:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:sierrawireless:es450:-:::::::*
	cpe:2.3:h:sierrawireless:gx450:-:::::::*
	cpe:2.3:h:sierrawireless:mp70:-:::::::*
	cpe:2.3:h:sierrawireless:mp70e:-:::::::*
	cpe:2.3:h:sierrawireless:rv50:-:::::::*
	cpe:2.3:h:sierrawireless:rv50x:-:::::::*

History

No history.

Information

Published : 2018-05-04 20:29

Updated : 2023-12-10 12:30

NVD link : CVE-2018-10251

Mitre link : CVE-2018-10251

CVE.ORG link : CVE-2018-10251

JSON object : View

Products Affected

sierrawireless

rv50x
gx440
rv50
es450
mp70e
gx450
es440
aleos
mp70
gx400
ls300

CWE

CWE-1188

Insecure Default Initialization of Resource

CWE-862

Missing Authorization

{"id": "CVE-2018-10251", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": true, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2018-05-04T20:29:00.517", "references": [{"url": "https://source.sierrawireless.com/resources/airlink/software_reference_docs/technical-bulletin/sierra-wireless-technical-bulletin---cve-2018-10251/", "tags": ["Mitigation", "Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-1188"}, {"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware before 4.4.7 and GX450, ES450, RV50, RV50X, MP70, and MP70E routers with firmware before 4.9.3 could allow an unauthenticated remote attacker to execute arbitrary code and gain full control of an affected system, including issuing commands with root privileges."}, {"lang": "es", "value": "Una vulnerabilidad en los routers Sierra Wireless AirLink GX400, GX440, ES440 y LS300 con firmware en versiones anteriores a la 4.4.7 y los routers GX450, ES450, RV50, RV50X, MP70 y MP70E con firmware en versiones anteriores a la 4.9.3 podr\u00eda permitir que un atacante remoto no autenticado ejecute c\u00f3digo arbitrario y obtenga el control total de un sistema afectado, incluyendo el env\u00edo de comandos con privilegios root."}], "lastModified": "2019-10-03T00:03:26.223", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sierrawireless:aleos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "233FE30D-5ACB-4932-8551-95472B1017A2", "versionEndExcluding": "4.4.7"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sierrawireless:es440:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E2098BAB-AF80-4C32-A5B8-FD6296C74110"}, {"criteria": "cpe:2.3:h:sierrawireless:gx400:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5CBA7B93-E1C2-41C6-B21E-6DA8B568D751"}, {"criteria": "cpe:2.3:h:sierrawireless:gx440:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "15DD2CF2-3A83-4ED7-BCD8-05F60782AE17"}, {"criteria": "cpe:2.3:h:sierrawireless:ls300:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5F4A4F52-F99E-4F72-8A2C-8D2CC21461BD"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sierrawireless:aleos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8E1735B2-A306-408A-A30C-7014E7C79354", "versionEndExcluding": "4.9.3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sierrawireless:es450:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "524DF1AE-21F2-4AA6-99E7-6F98304FF845"}, {"criteria": "cpe:2.3:h:sierrawireless:gx450:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2C12CF71-FE0E-44EA-9F2E-7CFB42E7C216"}, {"criteria": "cpe:2.3:h:sierrawireless:mp70:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "007D4629-4BE2-4C7A-AC8B-E87739E22D12"}, {"criteria": "cpe:2.3:h:sierrawireless:mp70e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "47DBB86D-8089-4A6C-8485-5E5CB400645F"}, {"criteria": "cpe:2.3:h:sierrawireless:rv50:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "54218BC7-D942-4907-8052-ECB308753162"}, {"criteria": "cpe:2.3:h:sierrawireless:rv50x:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "61D3EF27-E823-4E49-BD58-D050EB02D294"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}