Lucene search

MitreCVE-2019-11858

HistoryAug 21, 2020 - 7:15 p.m.

CVE-2019-11858

2020-08-2119:15:11

CWE-120

mitre

web.nvd.nist.gov

cve-2019-11858

buffer overflow

acemanager

aleos

web api

vulnerability

nvd

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

43.3%

JSON

Multiple buffer overflow vulnerabilities exist in the AceManager Web API of ALEOS before 4.13.0, 4.9.5, and 4.4.9.

Affected configurations

Nvd

Node

sierrawirelessaleosRange≤4.12.0

AND

sierrawirelessairlink_lx40Match-

sierrawirelessairlink_lx60Match-

sierrawirelessairlink_mp70Match-

sierrawirelessairlink_mp70eMatch-

sierrawirelessairlink_rv50Match-

sierrawirelessairlink_rv50xMatch-

Node

sierrawirelessaleosRange≤4.9.4

AND

sierrawirelessairlink_es450Match-

sierrawirelessairlink_gx450Match-

Node

sierrawirelessaleosRange≤4.4.8

AND

sierrawirelessairlink_es440Match-

sierrawirelessairlink_gx400Match-

sierrawirelessairlink_gx440Match-

sierrawirelessairlink_ls300Match-

VendorProductVersionCPE
sierrawirelessaleos*cpe:2.3:o:sierrawireless:aleos:*:*:*:*:*:*:*:*
sierrawirelessairlink_lx40-cpe:2.3:h:sierrawireless:airlink_lx40:-:*:*:*:*:*:*:*
sierrawirelessairlink_lx60-cpe:2.3:h:sierrawireless:airlink_lx60:-:*:*:*:*:*:*:*
sierrawirelessairlink_mp70-cpe:2.3:h:sierrawireless:airlink_mp70:-:*:*:*:*:*:*:*
sierrawirelessairlink_mp70e-cpe:2.3:h:sierrawireless:airlink_mp70e:-:*:*:*:*:*:*:*
sierrawirelessairlink_rv50-cpe:2.3:h:sierrawireless:airlink_rv50:-:*:*:*:*:*:*:*
sierrawirelessairlink_rv50x-cpe:2.3:h:sierrawireless:airlink_rv50x:-:*:*:*:*:*:*:*
sierrawirelessairlink_es450-cpe:2.3:h:sierrawireless:airlink_es450:-:*:*:*:*:*:*:*
sierrawirelessairlink_gx450-cpe:2.3:h:sierrawireless:airlink_gx450:-:*:*:*:*:*:*:*
sierrawirelessairlink_es440-cpe:2.3:h:sierrawireless:airlink_es440:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sierrawireless	aleos	*	cpe:2.3:o:sierrawireless:aleos::::::::
sierrawireless	airlink_lx40	-	cpe:2.3:h:sierrawireless:airlink_lx40:-:::::::*
sierrawireless	airlink_lx60	-	cpe:2.3:h:sierrawireless:airlink_lx60:-:::::::*
sierrawireless	airlink_mp70	-	cpe:2.3:h:sierrawireless:airlink_mp70:-:::::::*
sierrawireless	airlink_mp70e	-	cpe:2.3:h:sierrawireless:airlink_mp70e:-:::::::*
sierrawireless	airlink_rv50	-	cpe:2.3:h:sierrawireless:airlink_rv50:-:::::::*
sierrawireless	airlink_rv50x	-	cpe:2.3:h:sierrawireless:airlink_rv50x:-:::::::*
sierrawireless	airlink_es450	-	cpe:2.3:h:sierrawireless:airlink_es450:-:::::::*
sierrawireless	airlink_gx450	-	cpe:2.3:h:sierrawireless:airlink_gx450:-:::::::*
sierrawireless	airlink_es440	-	cpe:2.3:h:sierrawireless:airlink_es440:-:::::::*

Rows per page:

1-10 of 131

References

source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2020-004/

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

43.3%

JSON

Related for CVE-2019-11858