CWE Code: 798
Vulnerability Type: privilege_escalation
CVSS Score: 9.3
CWE Name:  Use of Hard-coded Credentials
Summary: a hard-coded credentials vulnerability exists in the snmpd function of the sierra wireless airlink es450 fw 4.9.3. activating snmpd outside of the webui can cause the activation of the hard-coded credentials, resulting in the exposure of a privileged user. an attacker can activate snmpd without any configuration changes to trigger this vulnerability.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2019-05-06
Last Modified Date: 2019-05-08