What is CVE-2019-11852?

CVE-2019-11852 is a low-severity vulnerability in Sierrawireless Airlink_es440, classified under Out-of-bounds Read. CVSS score: 3.7/10. Published 2020-08-21.

How severe is CVE-2019-11852?

Low severity. CVSS v3 base score is 3.7 out of 10.

Out-of-bounds Read in Sierrawireless Airlink_es440

CVE-2019-11852

An out-of-bounds reads vulnerability exists in the ACEView Service of ALEOS before 4.13.0, 4.9.5, and 4.4.9. Sensitive information may be disclosed via the ACEviewservice, accessible by default on the LAN.

Vulnerability class: Buffer Overflow

EPSS: 0.009 (56.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.7 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L.

Affected products

Sierrawireless Airlink_es440
Sierrawireless Airlink_es450
Sierrawireless Airlink_gx400
Sierrawireless Airlink_gx440
Sierrawireless Airlink_gx450
Sierrawireless Airlink_ls300
Sierrawireless Airlink_lx40
Sierrawireless Airlink_lx60
Sierrawireless Airlink_mp70
Sierrawireless Airlink_mp70e

Weakness classification (CWE)

CWE-125 — Out-of-bounds Read

References

cve@mitre.org (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2019-11852?: CVE-2019-11852 is a low-severity vulnerability in Sierrawireless Airlink_es440, classified under Out-of-bounds Read. CVSS score: 3.7/10. Published 2020-08-21.
How severe is CVE-2019-11852?: Low severity. CVSS v3 base score is 3.7 out of 10.