VULNERABILITY INTELLIGENCE

CVE-2018-10251

CVSS score9.8 CRITICAL
EPSS probability4.40%
CISA KEVNot currently listed
Published2018-05-04
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

A vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware before 4.4.7 and GX450, ES450, RV50, RV50X, MP70, and MP70E routers with firmware before 4.9.3 could allow an unauthenticated remote attacker to execute arbitrary code and gain full control of an affected system, including issuing commands with root privileges.

Weakness classification

  • CWE-862: Missing Authorization
  • CWE-1188: Initialization of a Resource with an Insecure Default

Primary references