An out-of-bounds reads vulnerability exists in the ACEView Service of ALEOS before 4.13.0, 4.9.5, and 4.4.9. Sensitive information may be disclosed via the ACEviewservice, accessible by default on the LAN.
| Software | From | Fixed in |
|---|---|---|
| sierrawireless / aleos | - | 4.13.0 |
| sierrawireless / aleos | - | 4.9.5 |
| sierrawireless / aleos | - | 4.4.9 |