CVE Tools
Track your stack

Aleos

42 CVEs tracked. 1 of them are in CISA KEV.

This hub aggregates every CVE we track for Aleos, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.

Aleos CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Aleos CVEs per month
MonthCVEs
2024-110
2024-120
2025-010
2025-020
2025-030
2025-040
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-120
2026-010
2026-020
2026-030
2026-040
2026-050
2026-060
2026-070
2026-080
2026-090
2026-100

Severity

How the 42 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical512%
  • High1843%
  • Medium1638%
  • Low37%

Latest CVEs

The 15 most recently published vulnerabilities affecting Aleos.

  1. CVE-2023-38321OpenNDS, as used in Sierra Wireless ALEOS before 4.17.0.12 and other products, allows remote attackers to cause a denial of service (NULL pointer dereference, daemon crash, and Captive Portal outag...7.5
  2. CVE-2023-40465Improper input leads to DoS8.3
  3. CVE-2023-40464Use of hardcoded certificate and private key8.1
  4. CVE-2023-40463Use of Hard-Coded Credentials8.1
  5. CVE-2023-40462Improper input leads to DoS7.5
  6. CVE-2023-40461Cross-site scripting vulnerability in ACEManager8.1
  7. CVE-2023-40460Improper input leads to DoS7.1
  8. CVE-2023-40459Improper input leads to DoS7.5
  9. CVE-2023-40458AceManager DOS Vulnerability7.5
  10. CVE-2022-46650Acemanager in ALEOS before version 4.16 allows a user with valid credentials to reconfigure the device to expose the ACEManager credentials on the pre-login status page.4.9
  11. CVE-2022-46649Acemanager in ALEOS before version 4.16 allows a user with valid credentials to manipulate the IP logging operation to execute arbitrary shell commands on the device.8.8
  12. CVE-2019-11851The ACENet service in Sierra Wireless ALEOS before 4.4.9, 4.5.x through 4.9.x before 4.9.5, and 4.10.x through 4.13.x before 4.14.0 allows remote attackers to execute arbitrary code via a buffer ov...9.8
  13. CVE-2020-8782ALEOS LAN-Side RPC Service Remote Code Execution7.5
  14. CVE-2020-8781Lack of input sanitization in UpdateRebootMgr service of ALEOS 4.11 and later allow an escalation to root from a low-privilege process.7.8
  15. CVE-2019-11862ALEOS SSH Service Allows Traffic Proxying8.1

Product grouping is registry-driven, with AI assist and human review. How it works