Sierrawireless Aleos vulnerabilities

CVE-2023-40464 [MEDIUM] CWE-321 CVE-2023-40464: Several versions of ALEOS, including ALEOS 4.16.0, use a hardcoded SSL certificate and Several versions of ALEOS, including ALEOS 4.16.0, use a hardcoded SSL certificate and private key. An attacker with access to these items could potentially perform a man in the middle attack between the ACEManager client and ACEManager server.

CVE-2022-46650 [MEDIUM] CWE-200 CVE-2022-46650: Acemanager in ALEOS before version 4.16 allows a user with valid credentials to reconfigure the devi Acemanager in ALEOS before version 4.16 allows a user with valid credentials to reconfigure the device to expose the ACEManager credentials on the pre-login status page.

CVE-2019-11849 [MEDIUM] CWE-787 CVE-2019-11849: A stack overflow vulnerabiltity exists in the AT command APIs of ALEOS before 4.11.0. The vulnerabil A stack overflow vulnerabiltity exists in the AT command APIs of ALEOS before 4.11.0. The vulnerability may allow code execution.

CVE-2019-11850 [MEDIUM] CWE-787 CVE-2019-11850: A stack overflow vulnerabiltity exist in the AT command interface of ALEOS before 4.11.0. The vulner A stack overflow vulnerabiltity exist in the AT command interface of ALEOS before 4.11.0. The vulnerability may allow code execution

CVE-2023-40460 [MEDIUM] CWE-79 CVE-2023-40460: The ACEManager component of ALEOS 4.16 and earlier does not validate uploaded file name The ACEManager component of ALEOS 4.16 and earlier does not validate uploaded file names and types, which could potentially allow an authenticated user to perform client-side script execution within ACEManager, altering the device functionality until the device is restarted.

CVE-2019-11857 [MEDIUM] CWE-20 CVE-2019-11857: Lack of input sanitization in AceManager of ALEOS before 4.12.0, 4.9.5 and 4.4.9 allows disclosure o Lack of input sanitization in AceManager of ALEOS before 4.12.0, 4.9.5 and 4.4.9 allows disclosure of sensitive system information.

CVE-2023-40461 [MEDIUM] CWE-79 CVE-2023-40461: The ACEManager component of ALEOS 4.16 and earlier allows an authenticated user with Ad The ACEManager component of ALEOS 4.16 and earlier allows an authenticated user with Administrator privileges to access a file upload field which does not fully validate the file name, creating a Stored Cross-Site Scripting condition.

CVE-2023-40465 [MEDIUM] CWE-121 CVE-2023-40465: Several versions of ALEOS, including ALEOS 4.16.0, include an opensource third-party co Several versions of ALEOS, including ALEOS 4.16.0, include an opensource third-party component which can be exploited from the local area network, resulting in a Denial of Service condition for the captive portal.

CVE-2015-6479 [MEDIUM] CVE-2015-6479: ACEmanager in Sierra Wireless ALEOS 4.4.2 and earlier on ES440, ES450, GX400, GX440, GX450, and LS30 ACEmanager in Sierra Wireless ALEOS 4.4.2 and earlier on ES440, ES450, GX400, GX440, GX450, and LS300 devices allows remote attackers to read the filteredlogs.txt file, and consequently discover potentially sensitive boot-sequence information, via unspecified vectors.

CVE-2019-11856 [LOW] CWE-294 CVE-2019-11856: A nonce reuse vulnerability exists in the ACEView service of ALEOS before 4.13.0, 4.9.5, and 4.4.9 a A nonce reuse vulnerability exists in the ACEView service of ALEOS before 4.13.0, 4.9.5, and 4.4.9 allowing message replay. Captured traffic to the ACEView service can be replayed to other gateways sharing the same credentials.