aleos Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/aleos/ Sun, 26 Feb 2023 06:29:41 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png aleos Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/aleos/ 32 32 CVE-2019-11847 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-11847/ Sun, 26 Feb 2023 06:29:41 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-11847/ An improper privilege management vulnerabitlity exists in ALEOS before 4.11.0, 4.9.4 and 4.4.9. An authenticated user can escalate to root via the command shell.

The post CVE-2019-11847 appeared first on CVE Vulnerability.

]]> An improper privilege management vulnerabitlity exists in ALEOS before 4.11.0, 4.9.4 and 4.4.9. An authenticated user can escalate to root via the command shell.

The post CVE-2019-11847 appeared first on CVE Vulnerability.

]]> CVE-2019-11848 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-11848/ Sun, 26 Feb 2023 06:29:41 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-11848/ An API abuse vulnerability exists in the AT command API of ALEOS before 4.13.0, 4.9.5, 4.4.9 due to lack of length checking when handling certain user-provided values.

The post CVE-2019-11848 appeared first on CVE Vulnerability.

]]> An API abuse vulnerability exists in the AT command API of ALEOS before 4.13.0, 4.9.5, 4.4.9 due to lack of length checking when handling certain user-provided values.

The post CVE-2019-11848 appeared first on CVE Vulnerability.

]]> CVE-2019-11849 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-11849/ Sun, 26 Feb 2023 06:29:41 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-11849/ A stack overflow vulnerabiltity exists in the AT command APIs of ALEOS before 4.11.0. The vulnerability may allow code execution.

The post CVE-2019-11849 appeared first on CVE Vulnerability.

]]> A stack overflow vulnerabiltity exists in the AT command APIs of ALEOS before 4.11.0. The vulnerability may allow code execution.

The post CVE-2019-11849 appeared first on CVE Vulnerability.

]]> CVE-2019-11850 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-11850/ Sun, 26 Feb 2023 06:29:41 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-11850/ A stack overflow vulnerabiltity exist in the AT command interface of ALEOS before 4.11.0. The vulnerability may allow code execution

The post CVE-2019-11850 appeared first on CVE Vulnerability.

]]> A stack overflow vulnerabiltity exist in the AT command interface of ALEOS before 4.11.0. The vulnerability may allow code execution

The post CVE-2019-11850 appeared first on CVE Vulnerability.

]]> CVE-2019-11851 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-11851/ Sun, 26 Feb 2023 06:29:41 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-11851/ The ACENet service in Sierra Wireless ALEOS before 4.4.9, 4.5.x through 4.9.x before 4.9.5, and 4.10.x through 4.13.x before 4.14.0 allows remote attackers to execute arbitrary code via a buffer overflow.

The post CVE-2019-11851 appeared first on CVE Vulnerability.

]]> The ACENet service in Sierra Wireless ALEOS before 4.4.9, 4.5.x through 4.9.x before 4.9.5, and 4.10.x through 4.13.x before 4.14.0 allows remote attackers to execute arbitrary code via a buffer overflow.

The post CVE-2019-11851 appeared first on CVE Vulnerability.

]]> CVE-2019-11852 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-11852/ Sun, 26 Feb 2023 06:29:41 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-11852/ An out-of-bounds reads vulnerability exists in the ACEView Service of ALEOS before 4.13.0, 4.9.5, and 4.4.9. Sensitive information may be disclosed via the ACEviewservice, accessible by default on the LAN.

The post CVE-2019-11852 appeared first on CVE Vulnerability.

]]> An out-of-bounds reads vulnerability exists in the ACEView Service of ALEOS before 4.13.0, 4.9.5, and 4.4.9. Sensitive information may be disclosed via the ACEviewservice, accessible by default on the LAN.

The post CVE-2019-11852 appeared first on CVE Vulnerability.

]]> CVE-2019-11853 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-11853/ Sun, 26 Feb 2023 06:29:41 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-11853/ Several potential command injections vulnerabilities exist in the AT command interface of ALEOS before 4.11.0, and 4.9.4.

The post CVE-2019-11853 appeared first on CVE Vulnerability.

]]> Several potential command injections vulnerabilities exist in the AT command interface of ALEOS before 4.11.0, and 4.9.4.

The post CVE-2019-11853 appeared first on CVE Vulnerability.

]]> CVE-2019-11855 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-11855/ Sun, 26 Feb 2023 06:29:41 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-11855/ An RPC server is enabled by default on the gateway’s LAN of ALEOS before 4.12.0, 4.9.5, and 4.4.9.

The post CVE-2019-11855 appeared first on CVE Vulnerability.

]]> An RPC server is enabled by default on the gateway’s LAN of ALEOS before 4.12.0, 4.9.5, and 4.4.9.

The post CVE-2019-11855 appeared first on CVE Vulnerability.

]]> CVE-2019-11856 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-11856/ Sun, 26 Feb 2023 06:29:41 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-11856/ A nonce reuse vulnerability exists in the ACEView service of ALEOS before 4.13.0, 4.9.5, and 4.4.9 allowing message replay. Captured traffic to the ACEView service can be replayed to other gateways sharing the same credentials.

The post CVE-2019-11856 appeared first on CVE Vulnerability.

]]> A nonce reuse vulnerability exists in the ACEView service of ALEOS before 4.13.0, 4.9.5, and 4.4.9 allowing message replay. Captured traffic to the ACEView service can be replayed to other gateways sharing the same credentials.

The post CVE-2019-11856 appeared first on CVE Vulnerability.

]]> CVE-2019-11857 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-11857/ Sun, 26 Feb 2023 06:29:41 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-11857/ Lack of input sanitization in AceManager of ALEOS before 4.12.0, 4.9.5 and 4.4.9 allows disclosure of sensitive system information.

The post CVE-2019-11857 appeared first on CVE Vulnerability.

]]> Lack of input sanitization in AceManager of ALEOS before 4.12.0, 4.9.5 and 4.4.9 allows disclosure of sensitive system information.

The post CVE-2019-11857 appeared first on CVE Vulnerability.

]]>