CVE-2018-4062

Name of the Vulnerable Software and Affected Versions Sierra Wireless AirLink ES450 FW version 4.9.3

Description A hard-coded credentials issue exists in the snmpd function. Activating snmpd outside of the WebUI can cause the activation of the hard-coded credentials, resulting in the exposure of a privileged user. An attacker can activate snmpd without any configuration changes to trigger this issue.

Recommendations For Sierra Wireless AirLink ES450 FW version 4.9.3, consider disabling the snmpd function until a fix is available to prevent the exposure of hard-coded credentials.