CVE-2023-40465CWE-121CWE-122

Improper input leads to DoS

High · published December 4, 2023

CVSS v3.1
8.3
EPSS
0%
Percentile
11.2
In the wild
Unconfirmed
What it is

Several versions of

ALEOS, including ALEOS 4.16.0, include an opensource

third-party

component which can be exploited from the local

area network,

resulting in a Denial of Service condition for the captive portal.

The record
Technical detail
CVSS v3.1
8.3 · HIGH
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00214 · 11.2th percentile
Weaknesses
CWE-121 · Stack-based Buffer Overflow; CWE-122 · Heap-based Buffer Overflow
Published
2023-12-04T23:02Z
EPSS history
Timeline
  • 04 DEC 23:02Z
    Improper input leads to DoS
    cvelistv5