airlink_es440 Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/airlink_es440/ Sun, 26 Feb 2023 06:29:41 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png airlink_es440 Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/airlink_es440/ 32 32 CVE-2019-11847 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-11847/ Sun, 26 Feb 2023 06:29:41 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-11847/ An improper privilege management vulnerabitlity exists in ALEOS before 4.11.0, 4.9.4 and 4.4.9. An authenticated user can escalate to root via the command shell.

The post CVE-2019-11847 appeared first on CVE Vulnerability.

]]> An improper privilege management vulnerabitlity exists in ALEOS before 4.11.0, 4.9.4 and 4.4.9. An authenticated user can escalate to root via the command shell.

The post CVE-2019-11847 appeared first on CVE Vulnerability.

]]> CVE-2019-11848 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-11848/ Sun, 26 Feb 2023 06:29:41 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-11848/ An API abuse vulnerability exists in the AT command API of ALEOS before 4.13.0, 4.9.5, 4.4.9 due to lack of length checking when handling certain user-provided values.

The post CVE-2019-11848 appeared first on CVE Vulnerability.

]]> An API abuse vulnerability exists in the AT command API of ALEOS before 4.13.0, 4.9.5, 4.4.9 due to lack of length checking when handling certain user-provided values.

The post CVE-2019-11848 appeared first on CVE Vulnerability.

]]> CVE-2019-11852 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-11852/ Sun, 26 Feb 2023 06:29:41 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-11852/ An out-of-bounds reads vulnerability exists in the ACEView Service of ALEOS before 4.13.0, 4.9.5, and 4.4.9. Sensitive information may be disclosed via the ACEviewservice, accessible by default on the LAN.

The post CVE-2019-11852 appeared first on CVE Vulnerability.

]]> An out-of-bounds reads vulnerability exists in the ACEView Service of ALEOS before 4.13.0, 4.9.5, and 4.4.9. Sensitive information may be disclosed via the ACEviewservice, accessible by default on the LAN.

The post CVE-2019-11852 appeared first on CVE Vulnerability.

]]> CVE-2019-11855 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-11855/ Sun, 26 Feb 2023 06:29:41 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-11855/ An RPC server is enabled by default on the gateway’s LAN of ALEOS before 4.12.0, 4.9.5, and 4.4.9.

The post CVE-2019-11855 appeared first on CVE Vulnerability.

]]> An RPC server is enabled by default on the gateway’s LAN of ALEOS before 4.12.0, 4.9.5, and 4.4.9.

The post CVE-2019-11855 appeared first on CVE Vulnerability.

]]> CVE-2019-11856 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-11856/ Sun, 26 Feb 2023 06:29:41 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-11856/ A nonce reuse vulnerability exists in the ACEView service of ALEOS before 4.13.0, 4.9.5, and 4.4.9 allowing message replay. Captured traffic to the ACEView service can be replayed to other gateways sharing the same credentials.

The post CVE-2019-11856 appeared first on CVE Vulnerability.

]]> A nonce reuse vulnerability exists in the ACEView service of ALEOS before 4.13.0, 4.9.5, and 4.4.9 allowing message replay. Captured traffic to the ACEView service can be replayed to other gateways sharing the same credentials.

The post CVE-2019-11856 appeared first on CVE Vulnerability.

]]> CVE-2019-11857 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-11857/ Sun, 26 Feb 2023 06:29:41 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-11857/ Lack of input sanitization in AceManager of ALEOS before 4.12.0, 4.9.5 and 4.4.9 allows disclosure of sensitive system information.

The post CVE-2019-11857 appeared first on CVE Vulnerability.

]]> Lack of input sanitization in AceManager of ALEOS before 4.12.0, 4.9.5 and 4.4.9 allows disclosure of sensitive system information.

The post CVE-2019-11857 appeared first on CVE Vulnerability.

]]> CVE-2019-11858 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-11858/ Sun, 26 Feb 2023 06:29:41 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-11858/ Multiple buffer overflow vulnerabilities exist in the AceManager Web API of ALEOS before 4.13.0, 4.9.5, and 4.4.9.

The post CVE-2019-11858 appeared first on CVE Vulnerability.

]]> Multiple buffer overflow vulnerabilities exist in the AceManager Web API of ALEOS before 4.13.0, 4.9.5, and 4.4.9.

The post CVE-2019-11858 appeared first on CVE Vulnerability.

]]> CVE-2019-11859 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-11859/ Sun, 26 Feb 2023 06:29:41 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-11859/ A buffer overflow exists in the SMS handler API of ALEOS before 4.13.0, 4.9.5, 4.9.4 that may allow code execution as root.

The post CVE-2019-11859 appeared first on CVE Vulnerability.

]]> A buffer overflow exists in the SMS handler API of ALEOS before 4.13.0, 4.9.5, 4.9.4 that may allow code execution as root.

The post CVE-2019-11859 appeared first on CVE Vulnerability.

]]> CVE-2019-11862 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-11862/ Sun, 26 Feb 2023 06:29:41 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-11862/ The SSH service on ALEOS before 4.12.0, 4.9.5, 4.4.9 allows traffic proxying.

The post CVE-2019-11862 appeared first on CVE Vulnerability.

]]> The SSH service on ALEOS before 4.12.0, 4.9.5, 4.4.9 allows traffic proxying.

The post CVE-2019-11862 appeared first on CVE Vulnerability.

]]>