SierraWireless ALEOS vulnerabilities

30 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Exploited SierraWireless ALEOS vulnerabilities

CVE-2018-4063 — Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability

CVE-2023-38321 — (CVSS 7.5)
CVE-2023-40465 — Improper input leads to DoS (CVSS 5.5)
CVE-2023-40464 — Use of hardcoded certificate and private key (CVSS 6.8)
CVE-2023-40463 — Use of Hard-Coded Credentials (CVSS 7.2)
CVE-2023-40462 — Improper input leads to DoS (CVSS 7.5)
CVE-2023-40461 — Cross-site scripting vulnerability in ACEManager (CVSS 4.8)
CVE-2023-40460 — Improper input leads to DoS (CVSS 5.4)
CVE-2023-40459 — Improper input leads to DoS (CVSS 7.5)
CVE-2023-40458 — AceManager DOS Vulnerability (CVSS 7.5)
CVE-2022-46650 — (CVSS 4.9)
CVE-2022-46649 — (CVSS 8.8)
CVE-2019-11851 — (CVSS 9.8)
CVE-2020-8782 — ALEOS LAN-Side RPC Service Remote Code Execution (CVSS 9.8)
CVE-2020-8781 — (CVSS 7.8)
CVE-2019-11862 — ALEOS SSH Service Allows Traffic Proxying (CVSS 8.4)
CVE-2019-11859 — ALEOS SMS Handler Buffer Overflow (CVSS 8.8)
CVE-2019-11858 — ALEOS Multiple Web UI vulnerabilities (CVSS 7.2)
CVE-2019-11857 — ALEOS AceManager Information Disclosure (CVSS 4.9)
CVE-2019-11856 — ALEOS ACEView Message Replay (CVSS 3.8)
CVE-2019-11855 — ALEOS LAN-Side RPC Server (CVSS 9.8)
CVE-2019-11853 — ALEOS AT Command Injections (CVSS 7.2)
CVE-2019-11852 — ALEOS ACEView Service Out-Of-Bounds Read (CVSS 9.1)
CVE-2019-11850 — ALEOS AT Command Stack Overflow (CVSS 6.7)
CVE-2019-11849 — ALEOS AT API Stack Overflow (CVSS 6.7)
CVE-2019-11848 — ALEOS AT Command API Abuse (CVSS 7.2)