First published: Fri Aug 21 2020(Updated: )
A stack overflow vulnerabiltity exist in the AT command interface of ALEOS before 4.11.0. The vulnerability may allow code execution
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Sierrawireless Aleos | <4.11.0 | |
Sierrawireless Airlink Lx40 | ||
Sierrawireless Airlink Lx60 | ||
Sierrawireless Airlink Mp70 | ||
Sierrawireless Airlink Mp70e | ||
Sierrawireless Airlink Rv50 | ||
Sierrawireless Airlink Rv50x |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-11850 is a stack overflow vulnerability in the AT command interface of ALEOS before version 4.11.0.
The severity of CVE-2019-11850 is medium with a CVSS score of 6.7.
Sierra Wireless Aleos before version 4.11.0 is affected by CVE-2019-11850 due to the stack overflow vulnerability in its AT command interface, which may allow code execution.
Sierra Wireless Airlink Lx40 is not vulnerable to CVE-2019-11850.
To fix CVE-2019-11850, update ALEOS to version 4.11.0 or later.