AL
Product
ALEOS
On CISA KEVExploited in the wild
30
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 14Medium 9Low 1
Watch
Add ALEOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-11851 | 9.8 | Dec 26 | The ACENet service in Sierra Wireless ALEOS before 4.4.9, 4.5.x through 4.9.x before 4.9.5, and 4.10.x through 4.13.x before 4.14.0 allows remote attackers to execute arbitrary… Affected: 4.10.0 before 4.14.0; 4.5.0 before 4.9.5; before 4.4.9 |
| CVE-2020-8782 | 9.8 | Oct 6 | Unauthenticated RPC server on ALEOS before 4.4.9, 4.9.5, and 4.14.0 allows remote code execution Affected: before 4.4.9; 4.5.0 before 4.9.5; 4.10.0 before 4.14.0 |
| CVE-2019-11855 | 9.8 | Aug 21 | An RPC server is enabled by default on the gateway's LAN of ALEOS before 4.12.0, 4.9.5, and 4.4.9 Affected: before 4.12.0; before 4.9.5; before 4.4.9 |
| CVE-2018-10251 | 9.8 | May 4 | A vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware before 4.4.7 and GX450, ES450, RV50, RV50X, MP70, and MP70E routers with firmware… Affected: before 4.4.7; before 4.9.3 |
| CVE-2019-11852 | 9.1 | Aug 21 | An out-of-bounds reads vulnerability exists in the ACEView Service of ALEOS before 4.13.0, 4.9.5, and 4.4.9 Affected: before 4.13.0; before 4.9.5; before 4.4.9 |
Showing 5
