Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2019-11853
Analyzed
More InfoOfficial Page
Source-cve@mitre.org
View Known Exploited Vulnerability (KEV) details
Published At-21 Aug, 2020 | 19:15
Updated At-09 Feb, 2022 | 19:27

Several potential command injections vulnerabilities exist in the AT command interface of ALEOS before 4.11.0, and 4.9.4.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary3.17.2HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Secondary3.13.9LOW
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L
Primary2.06.5MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:P
CPE Matches

sierrawireless
sierrawireless
>>aleos>>Versions before 4.11.0(exclusive)
cpe:2.3:o:sierrawireless:aleos:*:*:*:*:*:*:*:*
sierrawireless
sierrawireless
>>airlink_lx40>>-
cpe:2.3:h:sierrawireless:airlink_lx40:-:*:*:*:*:*:*:*
sierrawireless
sierrawireless
>>airlink_lx60>>-
cpe:2.3:h:sierrawireless:airlink_lx60:-:*:*:*:*:*:*:*
sierrawireless
sierrawireless
>>airlink_mp70>>-
cpe:2.3:h:sierrawireless:airlink_mp70:-:*:*:*:*:*:*:*
sierrawireless
sierrawireless
>>airlink_mp70e>>-
cpe:2.3:h:sierrawireless:airlink_mp70e:-:*:*:*:*:*:*:*
sierrawireless
sierrawireless
>>airlink_rv50>>-
cpe:2.3:h:sierrawireless:airlink_rv50:-:*:*:*:*:*:*:*
sierrawireless
sierrawireless
>>airlink_rv50x>>-
cpe:2.3:h:sierrawireless:airlink_rv50x:-:*:*:*:*:*:*:*
sierrawireless
sierrawireless
>>aleos>>Versions before 4.9.4(exclusive)
cpe:2.3:o:sierrawireless:aleos:*:*:*:*:*:*:*:*
sierrawireless
sierrawireless
>>airlink_es450>>-
cpe:2.3:h:sierrawireless:airlink_es450:-:*:*:*:*:*:*:*
sierrawireless
sierrawireless
>>airlink_gx450>>-
cpe:2.3:h:sierrawireless:airlink_gx450:-:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-77Primarynvd@nist.gov
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2020-004/cve@mitre.org
Vendor Advisory
Change History
0Changes found

Details not found