CVE-2019-11847: ALEOS User Root Shell Escalation
Published Aug 21, 2020
·Updated
An improper privilege management vulnerabitlity exists in ALEOS before 4.11.0, 4.9.4 and 4.4.9. An authenticated user can escalate to root via the command shell.
Affected Software
15 affected components
Sierrawireless Aleos<4.11.0
Sierrawireless Airlink Lx40
Sierrawireless Airlink Lx60
Sierrawireless Airlink Mp70
Sierrawireless Airlink Mp70e
Sierrawireless Airlink Rv50
Sierrawireless Airlink Rv50x
Sierrawireless Aleos<4.9.4
Sierrawireless Airlink Es450
Sierrawireless Airlink Gx450
Sierrawireless Aleos<4.4.9
Sierrawireless Airlink Es440
Sierrawireless Airlink Gx400
Sierrawireless Airlink Gx440
Sierrawireless Airlink Ls300
Event History
Aug 21, 2020
CVE Published
via MITRE·06:40 PM
Data Sourced
via MITRE·06:40 PM
DescriptionSeverity
Frequently Asked Questions
1
What is CVE-2019-11847?
CVE-2019-11847 is an improper privilege management vulnerability in ALEOS before version 4.11.0, 4.9.4, and 4.4.9.
2
How does the vulnerability CVE-2019-11847 affect Sierra Wireless ALEOS?
The vulnerability allows an authenticated user to escalate their privileges to root via the command shell.
3
What is the severity of CVE-2019-11847?
The severity of CVE-2019-11847 is high with a CVSS score of 7.8.
4
Which versions of ALEOS are affected by CVE-2019-11847?
ALEOS versions before 4.11.0, 4.9.4, and 4.4.9 are affected by CVE-2019-11847.
5
How can I fix the vulnerability CVE-2019-11847 in Sierra Wireless ALEOS?
To fix the vulnerability, you should update ALEOS to version 4.11.0, 4.9.4, or 4.4.9.