CVE-2019-11855 — Aleos vulnerability
2 documents2 sources
Severity
9.8CRITICALNVD
EPSS
0.0%
top 94.70%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedAug 21
Latest updateMay 24
Description
An RPC server is enabled by default on the gateway's LAN of ALEOS before 4.12.0, 4.9.5, and 4.4.9.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9
Affected Packages1 packages
🔴Vulnerability Details
1GHSA▶
GHSA-4gm5-xfm8-4jhf: An RPC server is enabled by default on the gateway's LAN of ALEOS before 4↗2022-05-24