Vulnerabilities > CVE-2020-8782 - Unspecified vulnerability in Sierrawireless Aleos

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

sierrawireless

critical

NVD

Published: 2020-10-06

Updated: 2024-11-21

Summary

Unauthenticated RPC server on ALEOS before 4.4.9, 4.9.5, and 4.14.0 allows remote code execution.

Vulnerable Configurations

Part	Description	Count
OS	Sierrawireless Sierrawireless Aleos 4.3.0 Sierrawireless Aleos 4.3.1 Sierrawireless Aleos 4.3.2 Sierrawireless Aleos 4.3.3 Sierrawireless Aleos 4.3.4 Sierrawireless Aleos 4.3.5 Sierrawireless Aleos 4.3.6 Sierrawireless Aleos 4.4.0 Sierrawireless Aleos 4.4.1 Sierrawireless Aleos 4.4.2 Sierrawireless Aleos 4.4.3 Sierrawireless Aleos 4.4.4 Sierrawireless Aleos 4.4.5 Sierrawireless Aleos 4.4.6 Sierrawireless Aleos 4.4.7 Sierrawireless Aleos 4.4.8 Sierrawireless Aleos 4.5.0 Sierrawireless Aleos 4.5.1 Sierrawireless Aleos 4.5.2 Sierrawireless Aleos 4.6.0 Sierrawireless Aleos 4.6.1 Sierrawireless Aleos 4.6.2 Sierrawireless Aleos 4.7.0 Sierrawireless Aleos 4.8.0 Sierrawireless Aleos 4.8.1 Sierrawireless Aleos 4.9.0 Sierrawireless Aleos 4.9.1 Sierrawireless Aleos 4.9.2 Sierrawireless Aleos 4.9.3 Sierrawireless Aleos 4.9.4 Sierrawireless Aleos 4.10.0 Sierrawireless Aleos 4.10.1 Sierrawireless Aleos 4.11.0 Sierrawireless Aleos 4.11.1 Sierrawireless Aleos 4.11.2 Sierrawireless Aleos 4.12.0 Sierrawireless Aleos 4.13.0	37
Hardware	Sierrawireless Sierrawireless Airlink Es440 - Sierrawireless Airlink Es450 - Sierrawireless Airlink Gx400 - Sierrawireless Airlink Gx440 - Sierrawireless Airlink Gx450 - Sierrawireless Airlink Ls300 - Sierrawireless Airlink Lx40 - Sierrawireless Airlink Lx60 - Sierrawireless Airlink Mp70 - Sierrawireless Airlink Mp70E - Sierrawireless Airlink Rv50 - Sierrawireless Airlink Rv50X - Sierrawireless Airlink Rv55 -	13

Summary

Vulnerable Configurations

References