304 matches found
CVE-2019-11848
CVE-2019-11848 is an API abuse vulnerability in the ALEOS AT Command API. The issue arises from lack of length checking when handling certain user-supplied values, affecting ALEOS versions prior to 4.13.0, 4.9.5, and 4.4.9. The connected sources corroborate the affected component (AT Command API)...
CVE-2019-11848 ALEOS AT Command API Abuse
An API abuse vulnerability exists in the AT command API of ALEOS before 4.13.0, 4.9.5, 4.4.9 due to lack of length checking when handling certain user-provided values...
CVE-2019-11850 ALEOS AT Command Stack Overflow
A stack overflow vulnerabiltity exist in the AT command interface of ALEOS before 4.11.0. The vulnerability may allow code execution...
CVE-2019-11850
CVE-2019-11850 is about a stack overflow in the AT command interface of ALEOS before version 4.11.0. The vulnerability exists in ALEOS, an embedded M2M development environment, and can lead to remote code execution, with exploitation demonstrated in versions prior to 4.11.0 per CNVD-2020-48629 an...
CVE-2019-11849 ALEOS AT API Stack Overflow
A stack overflow vulnerabiltity exists in the AT command APIs of ALEOS before 4.11.0. The vulnerability may allow code execution...
CVE-2019-11849
ALEOS (embedded M2M) prior to version 4.11.0 contains a stack overflow vulnerability in the AT Command API that can enable code execution. The CNVD-2020-48628 entry confirms the issue in ALEOS and specifies the affected component (AT Command API) and the vulnerable range (before 4.11.0). Practica...
CVE-2019-11847
CVE-2019-11847 describes a privilege management flaw in ALEOS prior to 4.11.0, 4.9.4, and 4.4.9. An authenticated user can escalate to root via the command shell due to mismanagement of privileges. Affected product context refers to ALEOS (embedded M2M/IDE environment). The available sources stat...
CVE-2019-11847 ALEOS User Root Shell Escalation
An improper privilege management vulnerabitlity exists in ALEOS before 4.11.0, 4.9.4 and 4.4.9. An authenticated user can escalate to root via the command shell...
CVE-2019-11857: Improper Input Validation
Lack of input sanitization in AceManager of ALEOS before 4.12.0, 4.9.5 and 4.4.9 allows disclosure of sensitive system information...
CVE-2019-11859: Buffer Copy without Checking Size of Input
A buffer overflow exists in the SMS handler API of ALEOS before 4.13.0, 4.9.5, 4.9.4 that may allow code execution as root...
CVE-2019-11856: Authentication Bypass by Capture-replay
A nonce reuse vulnerability exists in the ACEView service of ALEOS before 4.13.0, 4.9.5, and 4.4.9 allowing message replay. Captured traffic to the ACEView service can be replayed to other gateways sharing the same credentials...
CVE-2019-11852: Out-of-bounds Read
An out-of-bounds reads vulnerability exists in the ACEView Service of ALEOS before 4.13.0, 4.9.5, and 4.4.9. Sensitive information may be disclosed via the ACEviewservice, accessible by default on the LAN...
CVE-2019-11849: Out-of-bounds Write
A stack overflow vulnerabiltity exists in the AT command APIs of ALEOS before 4.11.0. The vulnerability may allow code execution...
CVE-2019-11862: Undefined Security Weakness
The SSH service on ALEOS before 4.12.0, 4.9.5, 4.4.9 allows traffic proxying...
CVE-2019-11848: Out-of-bounds Write
An API abuse vulnerability exists in the AT command API of ALEOS before 4.13.0, 4.9.5, 4.4.9 due to lack of length checking when handling certain user-provided values...
CVE-2019-11847: Improper Privilege Management
An improper privilege management vulnerabitlity exists in ALEOS before 4.11.0, 4.9.4 and 4.4.9. An authenticated user can escalate to root via the command shell...
CVE-2019-11853: Improper Neutralization of Special Elements used in a Command
Several potential command injections vulnerabilities exist in the AT command interface of ALEOS before 4.11.0, and 4.9.4...
CVE-2019-11858: Buffer Copy without Checking Size of Input
Multiple buffer overflow vulnerabilities exist in the AceManager Web API of ALEOS before 4.13.0, 4.9.5, and 4.4.9...