CVE-2019-11848

ALEOS AT Command API Abuse

Medium · published August 21, 2020

CVSS v3.1
4.1
EPSS
1%
Percentile
65.0
In the wild
Unconfirmed
What it is

An API abuse vulnerability exists in the AT command API of ALEOS before 4.13.0, 4.9.5, 4.4.9 due to lack of length checking when handling certain user-provided values.

The record
Technical detail
CVSS v3.1
4.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01086 · 65.0th percentile
Published
2020-08-21T18:44Z
EPSS history
Timeline
  • 21 AUG 18:44Z
    ALEOS AT Command API Abuse
    cvelistv5