// For flags

CVE-2023-40462

Improper input leads to DoS

Severity Score

7.5
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

Attend
*SSVC
Descriptions

The ACEManager
component of ALEOS 4.16 and earlier does not perform input
sanitization during authentication, which could potentially result
in a Denial of Service (DoS) condition for ACEManager without
impairing other router functions. ACEManager recovers from the
DoS condition by restarting within ten seconds of becoming
unavailable.

El componente ACEManager de ALEOS 4.16 y versiones anteriores no realiza sanitización de entrada durante la autenticación, lo que podría resultar en una condición de denegación de servicio (DoS) para ACEManager sin afectar otras funciones del router. ACEManager se recupera de la condición DoS reiniciándose dentro de los diez segundos posteriores a que no esté disponible.

The ACEManager component of ALEOS 4.16 and earlier does not perform input sanitization during authentication, which could potentially result in a Denial of Service (DoS) condition for ACEManager without impairing other router functions. ACEManager recovers from the DoS condition by restarting within ten seconds of becoming unavailable.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
None
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:Attend
Exploitation
None
Automatable
Yes
Tech. Impact
Partial
* Organization's Worst-case Scenario
Timeline
  • 2023-08-14 CVE Reserved
  • 2023-12-04 CVE Published
  • 2025-02-13 CVE Updated
  • 2025-06-08 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-617: Reachable Assertion
CAPEC
  • CAPEC-153: Input Data Manipulation
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Sierrawireless
Search vendor "Sierrawireless"
 Aleos
Search vendor "Sierrawireless" for product "Aleos"
 <= 4.16.0
Search vendor "Sierrawireless" for product "Aleos" and version " <= 4.16.0"
-
Affected
in Sierrawireless
Search vendor "Sierrawireless"
 Es450
Search vendor "Sierrawireless" for product "Es450"
--
Safe
Sierrawireless
Search vendor "Sierrawireless"
 Aleos
Search vendor "Sierrawireless" for product "Aleos"
 <= 4.16.0
Search vendor "Sierrawireless" for product "Aleos" and version " <= 4.16.0"
-
Affected
in Sierrawireless
Search vendor "Sierrawireless"
 Gx450
Search vendor "Sierrawireless" for product "Gx450"
--
Safe
Sierrawireless
Search vendor "Sierrawireless"
 Aleos
Search vendor "Sierrawireless" for product "Aleos"
 <= 4.16.0
Search vendor "Sierrawireless" for product "Aleos" and version " <= 4.16.0"
-
Affected
in Sierrawireless
Search vendor "Sierrawireless"
 Lx40
Search vendor "Sierrawireless" for product "Lx40"
--
Safe
Sierrawireless
Search vendor "Sierrawireless"
 Aleos
Search vendor "Sierrawireless" for product "Aleos"
 <= 4.16.0
Search vendor "Sierrawireless" for product "Aleos" and version " <= 4.16.0"
-
Affected
in Sierrawireless
Search vendor "Sierrawireless"
 Lx60
Search vendor "Sierrawireless" for product "Lx60"
--
Safe
Sierrawireless
Search vendor "Sierrawireless"
 Aleos
Search vendor "Sierrawireless" for product "Aleos"
 <= 4.16.0
Search vendor "Sierrawireless" for product "Aleos" and version " <= 4.16.0"
-
Affected
in Sierrawireless
Search vendor "Sierrawireless"
 Mp70
Search vendor "Sierrawireless" for product "Mp70"
--
Safe
Sierrawireless
Search vendor "Sierrawireless"
 Aleos
Search vendor "Sierrawireless" for product "Aleos"
 <= 4.16.0
Search vendor "Sierrawireless" for product "Aleos" and version " <= 4.16.0"
-
Affected
in Sierrawireless
Search vendor "Sierrawireless"
 Rv50x
Search vendor "Sierrawireless" for product "Rv50x"
--
Safe
Sierrawireless
Search vendor "Sierrawireless"
 Aleos
Search vendor "Sierrawireless" for product "Aleos"
 <= 4.16.0
Search vendor "Sierrawireless" for product "Aleos" and version " <= 4.16.0"
-
Affected
in Sierrawireless
Search vendor "Sierrawireless"
 Rv55
Search vendor "Sierrawireless" for product "Rv55"
--
Safe
Debian
Search vendor "Debian"
 Debian Linux
Search vendor "Debian" for product "Debian Linux"
 10.0
Search vendor "Debian" for product "Debian Linux" and version "10.0"
-
Affected