CVE-2019-11853: ALEOS AT Command Injections
Published Aug 21, 2020
·Updated
Several potential command injections vulnerabilities exist in the AT command interface of ALEOS before 4.11.0, and 4.9.4.
Affected Software
10 affected components
Sierrawireless Aleos<4.11.0
Sierrawireless Airlink Lx40
Sierrawireless Airlink Lx60
Sierrawireless Airlink Mp70
Sierrawireless Airlink Mp70e
Sierrawireless Airlink Rv50
Sierrawireless Airlink Rv50x
Sierrawireless Aleos<4.9.4
Sierrawireless Airlink Es450
Sierrawireless Airlink Gx450
Event History
Aug 21, 2020
CVE Published
via MITRE·06:52 PM
Data Sourced
via MITRE·06:52 PM
DescriptionSeverity
Frequently Asked Questions
1
What is CVE-2019-11853?
CVE-2019-11853 is a vulnerability that allows for potential command injections in the AT command interface of ALEOS before version 4.11.0, and version 4.9.4.
2
Is Sierra Wireless Airlink Lx40 affected by CVE-2019-11853?
Sierra Wireless Airlink Lx40 is not affected by CVE-2019-11853.
3
How severe is CVE-2019-11853?
CVE-2019-11853 has a severity rating of 7.2, which is considered high.
4
How can I fix CVE-2019-11853?
To fix CVE-2019-11853, update ALEOS to version 4.11.0 or above.
5
Where can I find more information about CVE-2019-11853?
You can find more information about CVE-2019-11853 in the Sierra Wireless Technical Bulletin - SWI-PSA-2020-004.