ALEOS ACEView Message Replay
CVE-2019-11856

3.3LOW

Key Information:

Vendor

Sierrawireless

Status
Aleos
Vendor
CVE Published:
21 August 2020

What is CVE-2019-11856?

A nonce reuse vulnerability exists in the ACEView service of ALEOS before 4.13.0, 4.9.5, and 4.4.9 allowing message replay. Captured traffic to the ACEView service can be replayed to other gateways sharing the same credentials.

References

https://source.sierrawireless.com/resources/security-bull...
x_refsource_MISC

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.