CRITICAL🇵🇱 Wersja polska

CVE-2019-11857

CVSS 9.1v3.1pub. 2020-08-21upd. 2024-11-21

Lack of input sanitization in AceManager of ALEOS before 4.12.0, 4.9.5 and 4.4.9 allows disclosure of sensitive system information.

🇵🇱 Read Polish description →

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Sierrawireless Airlink Es440
HW
Sierrawireless
all versions
Sierrawireless Airlink Es450
HW
Sierrawireless
all versions
Sierrawireless Airlink Gx400
HW
Sierrawireless
all versions
Sierrawireless Airlink Gx440
HW
Sierrawireless
all versions
Sierrawireless Airlink Gx450
HW
Sierrawireless
all versions
Sierrawireless Airlink Ls300
HW
Sierrawireless
all versions
Sierrawireless Airlink Lx40
HW
Sierrawireless
all versions
Sierrawireless Airlink Lx60
HW
Sierrawireless
all versions
Sierrawireless Airlink Mp70
HW
Sierrawireless
all versions
Sierrawireless Airlink Mp70e
HW
Sierrawireless
all versions
Sierrawireless Airlink Rv50
HW
Sierrawireless
all versions
Sierrawireless Airlink Rv50x
HW
Sierrawireless
all versions
Sierrawireless Aleos
OS
Sierrawireless
≤ 4.9.4< 4.12.0≤ 4.4.8

🔵

CHECK WITH VENDOR

No clear patch data available. Check vendor references.

CWE

References

source.sierrawireless.com/resources/security-bulletins/…

source.sierrawireless.com/resources/security-bulletins/…

Related vulnerabilities

CVE-2019-11851CRITICAL9.8PL ✓same product

Buffer overflow w usłudze ACENet Sierra Wireless ALEOS umożliwia RCE

CVE-2018-10251CRITICAL9.8PL ✓same product

RCE w routerach Sierra Wireless AirLink — wykonanie kodu z uprawnieniami root

CVE-2018-4063HIGH8.8⚠ KEVsame product

An exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless A...

CVE-2023-38321HIGH7.5same product

OpenNDS, as used in Sierra Wireless ALEOS before 4.17.0.12 and other products, allows remote attackers to caus...

CVE-2023-40459HIGH7.5same product

The ACEManager component of ALEOS 4.16 and earlier does not adequately perform input sanitization dur...