CVE-2023-40459CWE-476

Improper input leads to DoS

High · published December 4, 2023

CVSS v3.1
7.5
EPSS
2%
Percentile
83.1
In the wild
Unconfirmed
What it is

The

ACEManager component of ALEOS 4.16 and earlier does not adequately perform

input sanitization during authentication, which could potentially result in a

Denial of Service (DoS) condition for ACEManager without impairing other router

functions. ACEManager recovers from the DoS condition by restarting within ten

seconds of becoming unavailable.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.02296 · 83.1th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2023-12-04T22:48Z
EPSS history
Timeline
  • 04 DEC 22:48Z
    Improper input leads to DoS
    cvelistv5