VULNERABILITY INTELLIGENCE

CVE-2019-11856

CVSS score3.3 LOW
EPSS probability0.98%
CISA KEVNot currently listed
Published2020-08-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L

Description

A nonce reuse vulnerability exists in the ACEView service of ALEOS before 4.13.0, 4.9.5, and 4.4.9 allowing message replay. Captured traffic to the ACEView service can be replayed to other gateways sharing the same credentials.

Weakness classification

  • nvd@nist.gov: CWE-294

Primary references