CVE-2019-11852: ALEOS ACEView Service Out-Of-Bounds Read
Published Aug 21, 2020
·Updated
An out-of-bounds reads vulnerability exists in the ACEView Service of ALEOS before 4.13.0, 4.9.5, and 4.4.9. Sensitive information may be disclosed via the ACEviewservice, accessible by default on the LAN.
Affected Software
15 affected components
Sierrawireless Aleos<4.13.0
Sierrawireless Airlink Lx40
Sierrawireless Airlink Lx60
Sierrawireless Airlink Mp70
Sierrawireless Airlink Mp70e
Sierrawireless Airlink Rv50
Sierrawireless Airlink Rv50x
Sierrawireless Aleos<4.9.5
Sierrawireless Airlink Es450
Sierrawireless Airlink Gx450
Sierrawireless Aleos<4.4.9
Sierrawireless Airlink Es440
Sierrawireless Airlink Gx400
Sierrawireless Airlink Gx440
Sierrawireless Airlink Ls300
Event History
Aug 21, 2020
CVE Published
via MITRE·06:45 PM
Data Sourced
via MITRE·06:45 PM
DescriptionSeverity
Frequently Asked Questions
1
What is CVE-2019-11852?
CVE-2019-11852 is an out-of-bounds reads vulnerability in the ACEView Service of ALEOS before version 4.13.0, 4.9.5, and 4.4.9.
2
What is the severity of CVE-2019-11852?
The severity of CVE-2019-11852 is critical with a CVSS score of 9.1.
3
What software is affected by CVE-2019-11852?
ALEOS versions before 4.13.0, 4.9.5, and 4.4.9 are affected by CVE-2019-11852.
4
How can sensitive information be disclosed by CVE-2019-11852?
Sensitive information can be disclosed via the ACEView Service, which is accessible by default on the LAN.
5
How can I fix CVE-2019-11852?
To fix CVE-2019-11852, upgrade to ALEOS version 4.13.0, 4.9.5, or 4.4.9.