CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-40460

The ACEManager component of ALEOS 4.16 and earlier does not validate uploaded file names and types, which could potentially allow an authenticated user to perform client-side script execution within ACEManager, altering the device functionality until the device is restarted.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 0.2%

CVSS Severity

CVSS v3 Score 7.1

References

Products affected by CVE-2023-40460

Sierrawireless » Es450 » Version: N/A

cpe:2.3:h:sierrawireless:es450:-
Sierrawireless » Gx450 » Version: N/A

cpe:2.3:h:sierrawireless:gx450:-
Sierrawireless » Lx40 » Version: N/A

cpe:2.3:h:sierrawireless:lx40:-
Sierrawireless » Lx60 » Version: N/A

cpe:2.3:h:sierrawireless:lx60:-
Sierrawireless » Mp70 » Version: N/A

cpe:2.3:h:sierrawireless:mp70:-
Sierrawireless » Rv50x » Version: N/A

cpe:2.3:h:sierrawireless:rv50x:-
Sierrawireless » Rv55 » Version: N/A

cpe:2.3:h:sierrawireless:rv55:-
Sierrawireless » Aleos » Version: 4.10.0

cpe:2.3:o:sierrawireless:aleos:4.10.0
Sierrawireless » Aleos » Version: 4.10.1

cpe:2.3:o:sierrawireless:aleos:4.10.1
Sierrawireless » Aleos » Version: 4.11.0

cpe:2.3:o:sierrawireless:aleos:4.11.0
Sierrawireless » Aleos » Version: 4.11.1

cpe:2.3:o:sierrawireless:aleos:4.11.1
Sierrawireless » Aleos » Version: 4.11.2

cpe:2.3:o:sierrawireless:aleos:4.11.2
Sierrawireless » Aleos » Version: 4.12.0

cpe:2.3:o:sierrawireless:aleos:4.12.0
Sierrawireless » Aleos » Version: 4.13.0

cpe:2.3:o:sierrawireless:aleos:4.13.0
Sierrawireless » Aleos » Version: 4.14.0

cpe:2.3:o:sierrawireless:aleos:4.14.0
Sierrawireless » Aleos » Version: 4.3.0

cpe:2.3:o:sierrawireless:aleos:4.3.0
Sierrawireless » Aleos » Version: 4.3.1

cpe:2.3:o:sierrawireless:aleos:4.3.1
Sierrawireless » Aleos » Version: 4.3.2

cpe:2.3:o:sierrawireless:aleos:4.3.2
Sierrawireless » Aleos » Version: 4.3.3

cpe:2.3:o:sierrawireless:aleos:4.3.3
Sierrawireless » Aleos » Version: 4.3.4

cpe:2.3:o:sierrawireless:aleos:4.3.4
Sierrawireless » Aleos » Version: 4.3.5

cpe:2.3:o:sierrawireless:aleos:4.3.5
Sierrawireless » Aleos » Version: 4.3.6

cpe:2.3:o:sierrawireless:aleos:4.3.6
Sierrawireless » Aleos » Version: 4.4.0

cpe:2.3:o:sierrawireless:aleos:4.4.0
Sierrawireless » Aleos » Version: 4.4.1

cpe:2.3:o:sierrawireless:aleos:4.4.1
Sierrawireless » Aleos » Version: 4.4.2

cpe:2.3:o:sierrawireless:aleos:4.4.2
Sierrawireless » Aleos » Version: 4.4.3

cpe:2.3:o:sierrawireless:aleos:4.4.3
Sierrawireless » Aleos » Version: 4.4.4

cpe:2.3:o:sierrawireless:aleos:4.4.4
Sierrawireless » Aleos » Version: 4.4.5

cpe:2.3:o:sierrawireless:aleos:4.4.5
Sierrawireless » Aleos » Version: 4.4.6

cpe:2.3:o:sierrawireless:aleos:4.4.6
Sierrawireless » Aleos » Version: 4.4.7

cpe:2.3:o:sierrawireless:aleos:4.4.7
Sierrawireless » Aleos » Version: 4.4.8

cpe:2.3:o:sierrawireless:aleos:4.4.8
Sierrawireless » Aleos » Version: 4.4.9

cpe:2.3:o:sierrawireless:aleos:4.4.9
Sierrawireless » Aleos » Version: 4.5.0

cpe:2.3:o:sierrawireless:aleos:4.5.0
Sierrawireless » Aleos » Version: 4.5.1

cpe:2.3:o:sierrawireless:aleos:4.5.1
Sierrawireless » Aleos » Version: 4.5.2

cpe:2.3:o:sierrawireless:aleos:4.5.2
Sierrawireless » Aleos » Version: 4.6.0

cpe:2.3:o:sierrawireless:aleos:4.6.0
Sierrawireless » Aleos » Version: 4.6.1

cpe:2.3:o:sierrawireless:aleos:4.6.1
Sierrawireless » Aleos » Version: 4.6.2

cpe:2.3:o:sierrawireless:aleos:4.6.2
Sierrawireless » Aleos » Version: 4.7.0

cpe:2.3:o:sierrawireless:aleos:4.7.0
Sierrawireless » Aleos » Version: 4.8.0

cpe:2.3:o:sierrawireless:aleos:4.8.0
Sierrawireless » Aleos » Version: 4.8.1

cpe:2.3:o:sierrawireless:aleos:4.8.1
Sierrawireless » Aleos » Version: 4.9.0

cpe:2.3:o:sierrawireless:aleos:4.9.0
Sierrawireless » Aleos » Version: 4.9.1

cpe:2.3:o:sierrawireless:aleos:4.9.1
Sierrawireless » Aleos » Version: 4.9.2

cpe:2.3:o:sierrawireless:aleos:4.9.2
Sierrawireless » Aleos » Version: 4.9.3

cpe:2.3:o:sierrawireless:aleos:4.9.3
Sierrawireless » Aleos » Version: 4.9.4

cpe:2.3:o:sierrawireless:aleos:4.9.4
Sierrawireless » Aleos » Version: 4.9.5

cpe:2.3:o:sierrawireless:aleos:4.9.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-40460

Products

Pricing

Contact Us