Login Request a demo
AL
Product
ALEOS
by sierrawireless · last CVE Dec 25, 2023
On CISA KEVExploited in the wild
30
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities30In the news1Timeline
Severity mix
Critical 5High 14Medium 9Low 1
Severity
All severities30Critical5High14Medium9Low1
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add ALEOS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-40464
6.8
0%
Dec 4
Use of hardcoded certificate and private key
Affected: 4.10 through 4.16; through 4.9.8
CVE-2019-11850
6.7
0%
Aug 21
A stack overflow vulnerabiltity exist in the AT command interface of ALEOS before 4.11.0
Affected: before 4.11.0
CVE-2019-11849
6.7
0%
Aug 21
A stack overflow vulnerabiltity exists in the AT command APIs of ALEOS before 4.11.0
Affected: before 4.11.0
CVE-2023-40465
5.5
0%
Dec 4
Improper input leads to DoS
Affected: 4.10 through 4.16; through 4.9.8
CVE-2023-40460
5.4
0%
Dec 4
Improper input leads to DoS
Affected: 4.10 through 4.16; through 4.9.8
CVE-2022-46650
4.9
12%
Feb 10
Acemanager in ALEOS before version 4.16 allows a user with valid credentials to reconfigure the device to expose the ACEManager credentials on the pre-login status page
Affected: through 4.9.7; through 4.16.0
CVE-2019-11857
4.9
2%
Aug 21
Lack of input sanitization in AceManager of ALEOS before 4.12.0, 4.9.5 and 4.4.9 allows disclosure of sensitive system information
Affected: before 4.12.0; through 4.9.4; through 4.4.8
CVE-2023-40461
4.8
0%
Dec 4
Cross-site scripting vulnerability in ACEManager
Affected: 4.10 through 4.16; through 4.9.8
CVE-2015-6479
4.3
2%
Apr 21
ACEmanager in Sierra Wireless ALEOS 4.4.2 and earlier on ES440, ES450, GX400, GX440, GX450, and LS300 devices allows remote attackers to read the filteredlogs.txt file, and…
Affected: through 4.4.2
Showing 9