CVE-2023-40463 (published 2023-12-04T22:57:41.197Z)










When configured in
debugging mode by an authenticated user with



administrative
privileges, ALEOS 4.16 and earlier store the SHA512



hash of the common
root password for that version in a directory



accessible to a user
with root privileges or equivalent access.








Affected products: Vendor: SierraWireless
Product: ALEOS
Versions: 4.10, 0