CVE-2023-40459 (published 2023-12-04T22:48:05.584Z)









The
ACEManager component of ALEOS 4.16 and earlier does not adequately perform
input sanitization during authentication, which could potentially result in a
Denial of Service (DoS) condition for ACEManager without impairing other router
functions. ACEManager recovers from the DoS condition by restarting within ten
seconds of becoming unavailable.







Affected products: Vendor: SierraWireless
Product: ALEOS
Versions: 4.10, 0