What’s Vulnerable › Vulnerabilities

CVE-2023-40462: Improper input leads to DoS

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-12-04 · updated 2026-06-17
• Weakness: CWE-617

Description

The ACEManager component of ALEOS 4.16 and earlier does not perform input sanitization during authentication, which could potentially result in a Denial of Service (DoS) condition for ACEManager without impairing other router functions. ACEManager recovers from the DoS condition by restarting within ten seconds of becoming unavailable.

Affected products

• Debian Linux: 10.0
• SierraWireless ALEOS: through 4.16.0

References

• https://lists.debian.org/debian-lts-announce/2023/12/msg00024.html
• https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006/#sthash.6KUVtE6w.dpbs
• https://lists.debian.org/debian-lts-announce/2023/12/msg00024.html
• https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006/#sthash.6KUVtE6w.dpbs

Get alerted when CVE-2023-40462 or the next vulnerability affects your stack