CVE-2023-40462CWE-617

Improper input leads to DoS

High · published December 4, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
58.6
In the wild
Unconfirmed
What it is

The ACEManager

component of ALEOS 4.16 and earlier does not

perform input

sanitization during authentication, which could

potentially result

in a Denial of Service (DoS) condition for

ACEManager without

impairing other router functions. ACEManager

recovers from the

DoS condition by restarting within ten seconds of

becoming

unavailable.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00878 · 58.6th percentile
Weakness
CWE-617 · Reachable Assertion
Published
2023-12-04T22:53Z
EPSS history
Timeline
  • 04 DEC 22:53Z
    Improper input leads to DoS
    cvelistv5