Lucene search

K
cvelistMitreCVELIST:CVE-2019-11858
HistoryAug 21, 2020 - 6:52 p.m.

CVE-2019-11858 ALEOS Multiple Web UI vulnerabilities

2020-08-2118:52:42
mitre
www.cve.org
3
acemanager web api
aleos
buffer overflow

CVSS3

5.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:H

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

43.3%

Multiple buffer overflow vulnerabilities exist in the AceManager Web API of ALEOS before 4.13.0, 4.9.5, and 4.4.9.

CVSS3

5.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:H

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

43.3%

Related for CVELIST:CVE-2019-11858