265 matches found
CVE-2020-8781
Lack of input sanitization in UpdateRebootMgr service of ALEOS 4.11 and later allow an escalation to root from a low-privilege process...
ALEOS Random Number Reuse Vulnerability
ALEOS is an integrated development environment for building customized embedded M2M applications. A random number reuse vulnerability exists in the ACEView service in ALEOS versions prior to 4.13.0, 4.9.5, and 4.4.9, which can be exploited by an attacker to replay messages...
ALEOS API Abuse Vulnerability
ALEOS is an integrated development environment for building customized embedded M2M applications. An API abuse vulnerability exists in the AT Command API in ALEOS versions prior to 4.13.0, 4.9.5, and 4.4.9, which stems from a lack of length checking when processing certain user-supplied values, a...
ALEOS Buffer Overflow Vulnerability (CNVD-2020-48634)
ALEOS is an integrated development environment for building customized embedded M2M applications. A buffer overflow vulnerability exists in the AceManager Web API in ALEOS versions prior to 4.13.0, 4.9.5, and 4.4.9, and no details of the vulnerability are available at this time...
ALEOS Information Disclosure Vulnerability
ALEOS is an integrated development environment for building customized embedded M2M applications. An information disclosure vulnerability exists in ALEOS versions prior to 4.12.0, 4.9.5, and 4.4.9, which stems from a lack of input validation in ALEOS' AceManager, and can be exploited by an attack...
ALEOS Out-of-Bounds Read Vulnerability
ALEOS is an integrated development environment for building customized embedded M2M applications. An out-of-bounds read vulnerability exists in the ACEView service in ALEOS versions prior to 4.13.0, 4.9.5, and 4.4.9, which can be exploited by an attacker to obtain sensitive information...
ALEOS Buffer Overflow Vulnerability
ALEOS is an integrated development environment for building customized embedded M2M applications. A buffer overflow vulnerability exists in the SMS Handler API in ALEOS versions prior to 4.13.0, 4.9.5, and 4.4.9, which can be exploited by an attacker to execute code as root...
ALEOS Command Injection Vulnerability
ALEOS is an integrated development environment for building customized embedded M2M applications. A command injection vulnerability exists in the AT command interface in ALEOS versions prior to 4.11.0, 4.9.4, and no detailed vulnerability details are available at this time...
ALEOS Stack Overflow Vulnerability
ALEOS is an integrated development environment for building customized embedded M2M applications. A stack overflow vulnerability exists in the AT command interface in ALEOS versions prior to 4.11.0, which can be exploited by an attacker to execute code...
ALEOS stack overflow vulnerability (CNVD-2020-48628)
ALEOS is an integrated development environment for building customized embedded M2M applications. A stack overflow vulnerability exists in the AT Command API in ALEOS versions prior to 4.11.0, which can be exploited by an attacker to execute code...
CVE-2019-11862
The SSH service on ALEOS before 4.12.0, 4.9.5, 4.4.9 allows traffic proxying...
CVE-2019-11862
The SSH service on ALEOS before 4.12.0, 4.9.5, 4.4.9 allows traffic proxying...
CVE-2019-11859
A buffer overflow exists in the SMS handler API of ALEOS before 4.13.0, 4.9.5, 4.9.4 that may allow code execution as root...
CVE-2019-11849
A stack overflow vulnerabiltity exists in the AT command APIs of ALEOS before 4.11.0. The vulnerability may allow code execution...
CVE-2019-11857
Lack of input sanitization in AceManager of ALEOS before 4.12.0, 4.9.5 and 4.4.9 allows disclosure of sensitive system information...
CVE-2019-11850
A stack overflow vulnerabiltity exist in the AT command interface of ALEOS before 4.11.0. The vulnerability may allow code execution...
CVE-2019-11853
Several potential command injections vulnerabilities exist in the AT command interface of ALEOS before 4.11.0, and 4.9.4...
CVE-2019-11855
An RPC server is enabled by default on the gateway's LAN of ALEOS before 4.12.0, 4.9.5, and 4.4.9...