CVE-2019-11852: Sierra Wireless ALEOS

Critical severity, CVSS 9.1. EPSS: 0.9% chance of exploitation in the next 30 days.

An out-of-bounds reads vulnerability exists in the ACEView Service of ALEOS before 4.13.0, 4.9.5, and 4.4.9. Sensitive information may be disclosed via the ACEviewservice, accessible by default on the LAN.

Affected products

• Sierra Wireless ALEOS: before 4.13.0 (fixed in 4.13.0); before 4.9.5 (fixed in 4.9.5); before 4.4.9 (fixed in 4.4.9)

Published 2020-08-21. Last modified 2026-06-17.