CVE-2018-4063

HIGH

8.8

CVSS Score

Published: May 6, 2019 at 06:43 PM UTC

Updated: June 17, 2026 at 01:58 AM UTC

3 products affected across 1 vendorALEOSAirlink Es450Airlink ES450 Firmware

Using Sierra Wireless by N/A?

Get instant alerts when new vulnerabilities affect Sierra Wireless - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8.8

Exploitation

CISA KEV

Exploit prediction

EPSS 27%

SSVC

Active

Actively Exploited

CISA Known Exploited Vulnerabilities (KEV) Catalog

EPSS Score27.3%

EPSS (Exploit Prediction Scoring System) estimates a 27.3% chance this CVE is exploited in the wild within the next 30 days — higher than 98% of all CVEs. It complements CVSS: a high EPSS on a mid-severity CVE can still be urgent.

Sierra Wireless AirLink ALEOS contains an unrestricted upload of file with dangerous type vulnerability. A specially crafted HTTP request can upload a file, resulting in executable code being uploaded, and routable, to the webserver. An attacker can make an authenticated HTTP request to trigger this vulnerability. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

Required Action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Ransomware Use

Unknown

Added to KEV

Dec 12, 2025

Remediation Due

Jan 2, 2026

298 days overdue

Notes

https://www.cisa.gov/news-events/ics-advisories/icsa-19-122-03

https://source.sierrawireless.com/resources/airlink/software_reference_docs/technical-bulletin/sierra-wireless-technical-bulletin---swi-psa-2019-003

https://source.sierrawireless.com/resources/airlink/hardware_reference_docs/airlink_es450_eol

https://nvd.nist.gov/vuln/detail/CVE-2018-4063

Description

An exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can upload a file, resulting in executable code being uploaded, and routable, to the webserver. An attacker can make an authenticated HTTP request to trigger this vulnerability.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

ALEOS · Sierrawireless

95%

v < 4.11.0v < 4.4.9v < 4.9.4

sierrawireless-airlink-es440 (environment) · sierrawireless-airlink-es450 (environment) · sierrawireless-airlink-gx400 (environment) · sierrawireless-airlink-gx440 (environment) · sierrawireless-airlink-gx450 (environment) · sierrawireless-airlink-ls300 (environment) · sierrawireless-airlink-lx40 (environment) · sierrawireless-airlink-lx60 (environment) · sierrawireless-airlink-mp70 (environment) · sierrawireless-airlink-mp70e (environment) · sierrawireless-airlink-rv50 (environment) · sierrawireless-airlink-rv50x (environment)

Airlink ES450 Firmware · Sierrawireless

60%

Sierra Wireless AirLink ES450 FW 4.9.3

Airlink Es450 · Sierrawirelessdevice

80%

All versions