← Back

CVE-2019-11851

nvd nist
Published: Dec 26, 2022Modified: Apr 16, 2025

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

The ACENet service in Sierra Wireless ALEOS before 4.4.9, 4.5.x through 4.9.x before 4.9.5, and 4.10.x through 4.13.x before 4.14.0 allows remote attackers to execute arbitrary code via a buffer overflow.

Affected (3)

Sierrawireless
1 product
Aleos
Configuration A
1 vulnerable · 6 platform
Vulnerable SoftwareAffected Versions
Aleos
From 4.10.0 to 4.14.0
Running on/withPlatform Versions
Sierrawireless
Lx40
All versions
Sierrawireless
Lx60
All versions
Sierrawireless
Mp70
All versions
Sierrawireless
Mp70e
All versions
Sierrawireless
Rv50
All versions
Sierrawireless
Rv50x
All versions
Configuration B
1 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Aleos
From 4.5.0 to 4.9.5
Running on/withPlatform Versions
Sierrawireless
Es450
All versions
Sierrawireless
Gx450
All versions
Configuration C
1 vulnerable · 4 platform
Vulnerable SoftwareAffected Versions
Aleos
Before 4.4.9
Running on/withPlatform Versions
Sierrawireless
Es440
All versions
Sierrawireless
Gx400
All versions
Sierrawireless
Gx440
All versions
Sierrawireless
Ls300
All versions

Related CWEs

CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (4)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.