CVE-2019-11862

Published: Aug 21, 2020Modified: Nov 21, 2024

8.4

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.5 / Impact: 5.9

Source: NVD

Description

The SSH service on ALEOS before 4.12.0, 4.9.5, 4.4.9 allows traffic proxying.

Affected (2)

Products: Sierrawireless: Aleos

1 product

Configuration A

2 vulnerable · 12 platform

Vulnerable Software	Affected Versions
Sierrawireless Aleos	Before 4.4.9
Sierrawireless Aleos	From 4.9.0 to 4.9.5

Running on/with	Platform Versions
Sierrawireless Airlink Es440	All versions
Sierrawireless Airlink Es450	All versions
Sierrawireless Airlink Gx400	All versions
Sierrawireless Airlink Gx440	All versions
Sierrawireless Airlink Gx450	All versions
Sierrawireless Airlink Ls300	All versions
Sierrawireless Airlink Lx40	All versions
Sierrawireless Airlink Lx60	All versions
Sierrawireless Airlink Mp70	All versions
Sierrawireless Airlink Mp70e	All versions
Sierrawireless Airlink Rv50	All versions
Sierrawireless Airlink Rv50x	All versions

References (2)

https://source.sierrawireless.com/resources/airlink/software_reference_docs/technical-bulletin/sierra-wireless-technical-bulletin---swi-psa-2019-004/

Source: cve@mitre.org

MitigationVendor Advisory

https://source.sierrawireless.com/resources/airlink/software_reference_docs/technical-bulletin/sierra-wireless-technical-bulletin---swi-psa-2019-004/

Source: af854a3a-2127-422b-91ae-364da2661108

MitigationVendor Advisory

Timeline

No history available yet.