CVE-2023-40464 (published 2023-12-04T22:59:33.449Z)










Several versions of
ALEOS, including ALEOS 4.16.0, use a hardcoded



SSL certificate and
private key. An attacker with access to these items



could potentially
perform a man in the middle attack between the



ACEManager client
and ACEManager server.








Affected products: Vendor: SierraWireless
Product: ALEOS
Versions: 4.10, 0