The ACEManager
component of ALEOS 4.16 and earlier does not
perform input
sanitization during authentication, which could
potentially result
in a Denial of Service (DoS) condition for
ACEManager without
impairing other router functions. ACEManager
recovers from the
DoS condition by restarting within ten seconds of
becoming
unavailable.
References
| Link | Resource |
|---|---|
| https://lists.debian.org/debian-lts-announce/2023/12/msg00024.html | Mailing List Third Party Advisory |
| https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006/#sthash.6KUVtE6w.dpbs | Vendor Advisory |
| https://lists.debian.org/debian-lts-announce/2023/12/msg00024.html | Mailing List Third Party Advisory |
| https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006/#sthash.6KUVtE6w.dpbs | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
|
History
13 Feb 2025, 17:17
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) The ACEManager component of ALEOS 4.16 and earlier does not perform input sanitization during authentication, which could potentially result in a Denial of Service (DoS) condition for ACEManager without impairing other router functions. ACEManager recovers from the DoS condition by restarting within ten seconds of becoming unavailable. |
21 Nov 2024, 08:19
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://lists.debian.org/debian-lts-announce/2023/12/msg00024.html - Mailing List, Third Party Advisory | |
| References | () https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006/#sthash.6KUVtE6w.dpbs - Vendor Advisory |
02 Feb 2024, 03:12
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* | |
| References | () https://lists.debian.org/debian-lts-announce/2023/12/msg00024.html - Mailing List, Third Party Advisory | |
| First Time |
Debian
Debian debian Linux |
31 Dec 2023, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
08 Dec 2023, 15:46
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:sierrawireless:aleos:*:*:*:*:*:*:*:* cpe:2.3:h:sierrawireless:mp70:-:*:*:*:*:*:*:* cpe:2.3:h:sierrawireless:lx40:-:*:*:*:*:*:*:* cpe:2.3:h:sierrawireless:lx60:-:*:*:*:*:*:*:* cpe:2.3:h:sierrawireless:rv55:-:*:*:*:*:*:*:* cpe:2.3:h:sierrawireless:rv50x:-:*:*:*:*:*:*:* cpe:2.3:h:sierrawireless:gx450:-:*:*:*:*:*:*:* cpe:2.3:h:sierrawireless:es450:-:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| CWE | CWE-617 | |
| References | () https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006/#sthash.6KUVtE6w.dpbs - Vendor Advisory | |
| First Time |
Sierrawireless gx450
Sierrawireless Sierrawireless aleos Sierrawireless lx60 Sierrawireless lx40 Sierrawireless es450 Sierrawireless rv50x Sierrawireless rv55 Sierrawireless mp70 |
04 Dec 2023, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-12-04 23:15
Updated : 2025-02-13 17:17
NVD link : CVE-2023-40462
Mitre link : CVE-2023-40462
CVE.ORG link : CVE-2023-40462
JSON object : View
Products Affected
debian
- debian_linux
sierrawireless
- rv55
- lx40
- aleos
- rv50x
- es450
- mp70
- lx60
- gx450
CWE
CWE-617
Reachable Assertion