Vulnerabilities > CVE-2019-11849 - Out-of-bounds Write vulnerability in Sierrawireless Aleos

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

local

low complexity

NVD

Published: 2020-08-21

Updated: 2022-02-09

Summary

A stack overflow vulnerabiltity exists in the AT command APIs of ALEOS before 4.11.0. The vulnerability may allow code execution.

Part	Description	Count
OS	Sierrawireless Sierrawireless Aleos 4.3.0 Sierrawireless Aleos 4.3.1 Sierrawireless Aleos 4.3.2 Sierrawireless Aleos 4.3.3 Sierrawireless Aleos 4.3.4 Sierrawireless Aleos 4.3.5 Sierrawireless Aleos 4.3.6 Sierrawireless Aleos 4.4.0 Sierrawireless Aleos 4.4.1 Sierrawireless Aleos 4.4.2 Sierrawireless Aleos 4.4.3 Sierrawireless Aleos 4.4.4 Sierrawireless Aleos 4.4.5 Sierrawireless Aleos 4.4.6 Sierrawireless Aleos 4.4.7 Sierrawireless Aleos 4.4.8 Sierrawireless Aleos 4.4.9 Sierrawireless Aleos 4.5.0 Sierrawireless Aleos 4.5.1 Sierrawireless Aleos 4.5.2 Sierrawireless Aleos 4.6.0 Sierrawireless Aleos 4.6.1 Sierrawireless Aleos 4.6.2 Sierrawireless Aleos 4.7.0 Sierrawireless Aleos 4.8.0 Sierrawireless Aleos 4.8.1 Sierrawireless Aleos 4.9.0 Sierrawireless Aleos 4.9.1 Sierrawireless Aleos 4.9.2 Sierrawireless Aleos 4.9.3 Sierrawireless Aleos 4.9.4 Sierrawireless Aleos 4.9.5 Sierrawireless Aleos 4.10.0 Sierrawireless Aleos 4.10.1	34
Hardware	Sierrawireless Sierrawireless Airlink Lx40 - Sierrawireless Airlink Lx60 - Sierrawireless Airlink Mp70 - Sierrawireless Airlink Mp70E - Sierrawireless Airlink Rv50 - Sierrawireless Airlink Rv50X -	6