CVE-2020-8782: Sierra Wireless ALEOS

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

Unauthenticated RPC server on ALEOS before 4.4.9, 4.9.5, and 4.14.0 allows remote code execution.

Affected products

• Sierra Wireless ALEOS: before 4.4.9 (fixed in 4.4.9); from 4.5.0, before 4.9.5 (fixed in 4.9.5); from 4.10.0, before 4.14.0 (fixed in 4.14.0)

Published 2020-10-06. Last modified 2026-06-17.