CVE-2019-11849: Sierra Wireless ALEOS

Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days.

A stack overflow vulnerabiltity exists in the AT command APIs of ALEOS before 4.11.0. The vulnerability may allow code execution.

Affected products

• Sierra Wireless ALEOS: before 4.11.0 (fixed in 4.11.0)

Published 2020-08-21. Last modified 2026-06-17.