CVE-2019-11856
ALEOS ACEView Message Replay
- State
- Published
- Severity
- 3.3 Low
- Published
- Aug 21, 2020
- Updated
- Sep 17, 2024
- Reserved
- May 9, 2019
Description
A nonce reuse vulnerability exists in the ACEView service of ALEOS before 4.13.0, 4.9.5, and 4.4.9 allowing message replay. Captured traffic to the ACEView service can be replayed to other gateways sharing the same credentials.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 3.3 Low | CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L | mitre |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.