Vulnerabilities > CVE-2019-11855 - Unspecified vulnerability in Sierrawireless Aleos

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

critical

NVD

Published: 2020-08-21

Updated: 2022-02-09

Summary

An RPC server is enabled by default on the gateway's LAN of ALEOS before 4.12.0, 4.9.5, and 4.4.9.

Part	Description	Count
OS	Sierrawireless Sierrawireless Aleos 4.3.0 Sierrawireless Aleos 4.3.1 Sierrawireless Aleos 4.3.2 Sierrawireless Aleos 4.3.3 Sierrawireless Aleos 4.3.4 Sierrawireless Aleos 4.3.5 Sierrawireless Aleos 4.3.6 Sierrawireless Aleos 4.4.0 Sierrawireless Aleos 4.4.1 Sierrawireless Aleos 4.4.2 Sierrawireless Aleos 4.4.3 Sierrawireless Aleos 4.4.4 Sierrawireless Aleos 4.4.5 Sierrawireless Aleos 4.4.6 Sierrawireless Aleos 4.4.7 Sierrawireless Aleos 4.4.8 Sierrawireless Aleos 4.4.9 Sierrawireless Aleos 4.5.0 Sierrawireless Aleos 4.5.1 Sierrawireless Aleos 4.5.2 Sierrawireless Aleos 4.6.0 Sierrawireless Aleos 4.6.1 Sierrawireless Aleos 4.6.2 Sierrawireless Aleos 4.7.0 Sierrawireless Aleos 4.8.0 Sierrawireless Aleos 4.8.1 Sierrawireless Aleos 4.9.0 Sierrawireless Aleos 4.9.1 Sierrawireless Aleos 4.9.2 Sierrawireless Aleos 4.9.3 Sierrawireless Aleos 4.9.4 Sierrawireless Aleos 4.9.5 Sierrawireless Aleos 4.10.0 Sierrawireless Aleos 4.10.1 Sierrawireless Aleos 4.11.0 Sierrawireless Aleos 4.11.1 Sierrawireless Aleos 4.11.2	37
Hardware	Sierrawireless Sierrawireless Airlink Lx40 - Sierrawireless Airlink Lx60 - Sierrawireless Airlink Mp70 - Sierrawireless Airlink Mp70E - Sierrawireless Airlink Rv50 - Sierrawireless Airlink Rv50X - Sierrawireless Airlink Es450 - Sierrawireless Airlink Gx450 - Sierrawireless Airlink Es440 - Sierrawireless Airlink Gx400 - Sierrawireless Airlink Gx440 - Sierrawireless Airlink Ls300 -	12