CVE-2019-11862: ALEOS SSH Service Allows Traffic Proxying
Published Aug 21, 2020
·Updated
The SSH service on ALEOS before 4.12.0, 4.9.5, 4.4.9 allows traffic proxying.
Affected Software
14 affected components
Sierrawireless Aleos<4.4.9
Sierrawireless Aleos>=4.9.0<4.9.5
Sierrawireless Airlink Es440
Sierrawireless Airlink Es450
Sierrawireless Airlink Gx400
Sierrawireless Airlink Gx440
Sierrawireless Airlink Gx450
Sierrawireless Airlink Ls300
Sierrawireless Airlink Lx40
Sierrawireless Airlink Lx60
Sierrawireless Airlink Mp70
Sierrawireless Airlink Mp70e
Sierrawireless Airlink Rv50
Sierrawireless Airlink Rv50x
Event History
Aug 21, 2020
CVE Published
via MITRE·06:53 PM
Data Sourced
via MITRE·06:53 PM
DescriptionSeverity
Frequently Asked Questions
1
What is CVE-2019-11862?
CVE-2019-11862 is a vulnerability that allows traffic proxying on the SSH service on ALEOS versions before 4.12.0, 4.9.5, and 4.4.9.
2
How severe is CVE-2019-11862?
CVE-2019-11862 has a severity value of 8.4, which is considered high.
3
Which software versions are affected by CVE-2019-11862?
ALEOS versions before 4.12.0, 4.9.5, and 4.4.9 are affected by CVE-2019-11862.
4
How can I fix CVE-2019-11862?
To fix CVE-2019-11862, upgrade to ALEOS version 4.12.0, 4.9.5, or 4.4.9 or higher.
5
Where can I find more information about CVE-2019-11862?
More information about CVE-2019-11862 can be found at the following link: [Sierra Wireless Technical Bulletin - SWI-PSA-2019-004](https://source.sierrawireless.com/resources/airlink/software_reference_docs/technical-bulletin/sierra-wireless-technical-bulletin---swi-psa-2019-004/)