CVE-2022-46650

🗓️ 10 Feb 2023 00:00:00Reported by SWIType

Acemanager in ALEOS prior to v4.16 exposes credentials

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2022-46650	10 Feb 202311:50	–	circl
CNNVD	Sierra Wireless AirLink Router 信息泄露漏洞	27 Jan 202300:00	–	cnnvd
Cvelist	CVE-2022-46650	10 Feb 202300:00	–	cvelist
EUVD	EUVD-2022-49453	3 Oct 202520:07	–	euvd
ICS	Sierra Wireless AirLink Router with ALEOS Software	26 Jan 202300:00	–	ics
NVD	CVE-2022-46650	10 Feb 202318:15	–	nvd
Prion	Code injection	10 Feb 202318:15	–	prion
Positive Technologies	PT-2023-14980 · Aleos · Aleos	10 Feb 202300:00	–	ptsecurity
RedhatCVE	CVE-2022-46650	22 May 202522:00	–	redhatcve
The Hacker News	Critical Infrastructure at Risk from New Vulnerabilities Found in Wireless IIoT Devices	9 Feb 202314:09	–	thn

NVD

Node

sierrawireless aleosRange≤4.9.7

AND

sierrawireless es450Match-

sierrawireless gx450Match-

Node

sierrawireless aleosRange≤4.16.0

AND

sierrawireless lx40Match-

sierrawireless lx60Match-

sierrawireless mp70Match-

sierrawireless rv50Match-

sierrawireless rv50xMatch-

sierrawireless rv55Match-

[
  {
    "vendor": "n/a",
    "product": "ALEOS",
    "versions": [
      {
        "version": "all versions before 4.16",
        "status": "affected"
      }
    ]
  }
]

Source	Link
source	www.source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-001/
cisa	www.cisa.gov/uscert/ics/advisories/icsa-23-026-04
otorio	www.otorio.com/blog/airlink-acemanager-vulnerabilities/

24 Mar 2025 17:15Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.14.9

EPSS0.00031

SSVC

CWE-200