Sierrawireless Aleos vulnerabilities

• sierrawireless aleos OpenNDS, as used in Sierra Wireless ALEOS before 4.17.0.12 and other products, allows remote... CVE-2023-38321 Fix available 7.5 HighDecember 25, 2023
• sierrawireless aleos Improper input leads to DoS CVE-2023-40465 8.3 HighDecember 4, 2023
• sierrawireless aleos Use of hardcoded certificate and private key CVE-2023-40464 8.1 HighDecember 4, 2023
• sierrawireless aleos Use of Hard-Coded Credentials CVE-2023-40463 8.1 HighDecember 4, 2023
• sierrawireless aleos, debian linux +1 more Improper input leads to DoS CVE-2023-40462 7.5 HighDecember 4, 2023
• sierrawireless aleos Cross-site scripting vulnerability in ACEManager CVE-2023-40461 8.1 HighDecember 4, 2023
• sierrawireless aleos Improper input leads to DoS CVE-2023-40460 7.1 HighDecember 4, 2023
• sierrawireless aleos Improper input leads to DoS CVE-2023-40459 Public exploit 7.5 HighDecember 4, 2023
• sierrawireless aleos AceManager DOS Vulnerability CVE-2023-40458 7.5 HighNovember 29, 2023
• sierrawireless aleos Acemanager in ALEOS before version 4.16 allows a user with valid credentials to reconfigure the... CVE-2022-46650 EPSS 12.3% 4.9 MediumFebruary 10, 2023
• sierrawireless aleos Acemanager in ALEOS before version 4.16 allows a user with valid credentials to manipulate the IP... CVE-2022-46649 Public exploit 8.8 HighFebruary 10, 2023
• sierrawireless aleos The ACENet service in Sierra Wireless ALEOS before 4.4.9, 4.5.x through 4.9.x before 4.9.5, and 4... CVE-2019-11851 9.8 CriticalDecember 26, 2022
• sierrawireless aleos ALEOS LAN-Side RPC Service Remote Code Execution CVE-2020-8782 7.5 HighOctober 6, 2020
• sierrawireless aleos Lack of input sanitization in UpdateRebootMgr service of ALEOS 4.11 and later allow an escalation... CVE-2020-8781 7.8 HighOctober 6, 2020
• sierrawireless aleos ALEOS SSH Service Allows Traffic Proxying CVE-2019-11862 8.1 HighAugust 21, 2020
• sierrawireless aleos ALEOS Multiple Web UI vulnerabilities CVE-2019-11858 5.7 MediumAugust 21, 2020
• sierrawireless aleos ALEOS AT Command Injections CVE-2019-11853 3.9 LowAugust 21, 2020
• sierrawireless aleos ALEOS SMS Handler Buffer Overflow CVE-2019-11859 6.0 MediumAugust 21, 2020
• sierrawireless aleos ALEOS AceManager Information Disclosure CVE-2019-11857 9.1 CriticalAugust 21, 2020
• sierrawireless aleos ALEOS ACEView Message Replay CVE-2019-11856 3.3 LowAugust 21, 2020
• sierrawireless aleos ALEOS LAN-Side RPC Server CVE-2019-11855 8.1 HighAugust 21, 2020
• sierrawireless aleos ALEOS ACEView Service Out-Of-Bounds Read CVE-2019-11852 3.7 LowAugust 21, 2020
• sierrawireless aleos ALEOS AT Command API Abuse CVE-2019-11848 4.1 MediumAugust 21, 2020
• sierrawireless aleos ALEOS AT Command Stack Overflow CVE-2019-11850 6.3 MediumAugust 21, 2020
• sierrawireless aleos ALEOS AT API Stack Overflow CVE-2019-11849 6.3 MediumAugust 21, 2020
• sierrawireless aleos ALEOS User Root Shell Escalation CVE-2019-11847 7.3 HighAugust 21, 2020
• sierra wireless airlink aleos, sierrawireless aleos +1 more An exploitable remote code execution vulnerability exists in the upload.cgi functionality of... CVE-2018-4063 In KEV EPSS 27.3% 8.8 HighMay 6, 2019
• sierrawireless aleos A vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware... CVE-2018-10251 9.8 CriticalMay 4, 2018
• sierrawireless aleos firmware Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 execute the management web application... CVE-2016-5071 8.8 HighApril 10, 2017
• sierrawireless aleos firmware Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 store passwords in cleartext. CVE-2016-5070 9.8 CriticalApril 10, 2017
• sierrawireless aleos firmware Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use guessable session tokens, which are... CVE-2016-5069 9.8 CriticalApril 10, 2017
• sierrawireless aleos firmware Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 do not require authentication for... CVE-2016-5068 9.8 CriticalApril 10, 2017
• sierrawireless aleos firmware Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Hayes AT command injection. CVE-2016-5067 8.8 HighApril 10, 2017
• sierrawireless aleos firmware Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 have weak passwords for admin, rauser,... CVE-2016-5066 9.8 CriticalApril 10, 2017
• sierrawireless aleos firmware Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Embedded_Ace_Set_Task.cgi command... CVE-2016-5065 9.8 CriticalApril 10, 2017
• sierrawireless aleos ACEmanager in Sierra Wireless ALEOS 4.4.2 and earlier on ES440, ES450, GX400, GX440, GX450, and... CVE-2015-6479 4.3 MediumApril 21, 2016
• sierrawireless aleos Sierra Wireless ALEOS before 4.4.2 on AirLink ES, GX, and LS devices has hardcoded root accounts,... CVE-2015-2897 10.0 HighAugust 8, 2015