CVE-2018-4063 Sierra Wireless AirLink ALEOS
Sierra Wireless AirLink ALEOS contains an unrestricted upload of file with dangerous type vulnerability. A specially crafted HTTP request can upload a file, resulting in executable code being uploaded, and routable, to the webserver. An attacker can make an authenticated HTTP request to trigger this vulnerability.…
- CVSS
- not scored
On CISA’s exploited list
Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability
- Added
- 2025-12-12
- Federal patch deadline
- 2026-01-02
- Ransomware use
- not known