Vulnerability Details CVE-2023-40462
The ACEManager
component of ALEOS 4.16 and earlier does not
perform input
sanitization during authentication, which could
potentially result
in a Denial of Service (DoS) condition for
ACEManager without
impairing other router functions. ACEManager
recovers from the
DoS condition by restarting within ten seconds of
becoming
unavailable.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 1.0%
CVSS Severity
CVSS v3 Score 7.5
References
- https://lists.debian.org/debian-lts-announce/2023/12/msg00024.html
- https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006/#sthash.6KUVtE6w.dpbs
- https://lists.debian.org/debian-lts-announce/2023/12/msg00024.html
- https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006/#sthash.6KUVtE6w.dpbs
Products affected by CVE-2023-40462
-
cpe:2.3:h:sierrawireless:es450:-
-
cpe:2.3:h:sierrawireless:gx450:-
-
cpe:2.3:h:sierrawireless:lx40:-
-
cpe:2.3:h:sierrawireless:lx60:-
-
cpe:2.3:h:sierrawireless:mp70:-
-
cpe:2.3:h:sierrawireless:rv50x:-
-
cpe:2.3:h:sierrawireless:rv55:-
-
cpe:2.3:o:debian:debian_linux:10.0
-
cpe:2.3:o:sierrawireless:aleos:4.10.0
-
cpe:2.3:o:sierrawireless:aleos:4.10.1
-
cpe:2.3:o:sierrawireless:aleos:4.11.0
-
cpe:2.3:o:sierrawireless:aleos:4.11.1
-
cpe:2.3:o:sierrawireless:aleos:4.11.2
-
cpe:2.3:o:sierrawireless:aleos:4.12.0
-
cpe:2.3:o:sierrawireless:aleos:4.13.0
-
cpe:2.3:o:sierrawireless:aleos:4.14.0
-
cpe:2.3:o:sierrawireless:aleos:4.3.0
-
cpe:2.3:o:sierrawireless:aleos:4.3.1
-
cpe:2.3:o:sierrawireless:aleos:4.3.2
-
cpe:2.3:o:sierrawireless:aleos:4.3.3
-
cpe:2.3:o:sierrawireless:aleos:4.3.4
-
cpe:2.3:o:sierrawireless:aleos:4.3.5
-
cpe:2.3:o:sierrawireless:aleos:4.3.6
-
cpe:2.3:o:sierrawireless:aleos:4.4.0
-
cpe:2.3:o:sierrawireless:aleos:4.4.1
-
cpe:2.3:o:sierrawireless:aleos:4.4.2
-
cpe:2.3:o:sierrawireless:aleos:4.4.3
-
cpe:2.3:o:sierrawireless:aleos:4.4.4
-
cpe:2.3:o:sierrawireless:aleos:4.4.5
-
cpe:2.3:o:sierrawireless:aleos:4.4.6
-
cpe:2.3:o:sierrawireless:aleos:4.4.7
-
cpe:2.3:o:sierrawireless:aleos:4.4.8
-
cpe:2.3:o:sierrawireless:aleos:4.4.9
-
cpe:2.3:o:sierrawireless:aleos:4.5.0
-
cpe:2.3:o:sierrawireless:aleos:4.5.1
-
cpe:2.3:o:sierrawireless:aleos:4.5.2
-
cpe:2.3:o:sierrawireless:aleos:4.6.0
-
cpe:2.3:o:sierrawireless:aleos:4.6.1
-
cpe:2.3:o:sierrawireless:aleos:4.6.2
-
cpe:2.3:o:sierrawireless:aleos:4.7.0
-
cpe:2.3:o:sierrawireless:aleos:4.8.0
-
cpe:2.3:o:sierrawireless:aleos:4.8.1
-
cpe:2.3:o:sierrawireless:aleos:4.9.0
-
cpe:2.3:o:sierrawireless:aleos:4.9.1
-
cpe:2.3:o:sierrawireless:aleos:4.9.2
-
cpe:2.3:o:sierrawireless:aleos:4.9.3
-
cpe:2.3:o:sierrawireless:aleos:4.9.4
-
cpe:2.3:o:sierrawireless:aleos:4.9.5