Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-40462

Improper input leads to DoS

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
SWI

Description

The ACEManager component of ALEOS 4.16 and earlier does not perform input sanitization during authentication, which could potentially result in a Denial of Service (DoS) condition for ACEManager without impairing other router functions. ACEManager recovers from the DoS condition by restarting within ten seconds of becoming unavailable.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SierraWireless ALEOS

Default version status: unaffected

  • 4.10 to ≤ 4.16affected
  • 0 to ≤ 4.9.8affected

References