CVE-2019-11856

—

CVSS 3.1

3.8 low

EPSS

<1%p60

Published

Aug 21, 2020 (Aug 21, 2020)

Modified

Jun 17, 2026

Description

A nonce reuse vulnerability exists in the ACEView service of ALEOS before 4.13.0, 4.9.5, and 4.4.9 allowing message replay. Captured traffic to the ACEView service can be replayed to other gateways sharing the same credentials.

Vendors: sierrawireless
Products: aleos
Weakness: CWE-294
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.