Acemanager in ALEOS before version 4.16 allows a user with valid credentials to manipulate the IP logging operation to execute arbitrary shell commands on the device.
| Software | From | Fixed in |
|---|---|---|
| sierrawireless / aleos | - | 4.9.7.x |
| sierrawireless / aleos | - | 4.16.0.x |