Lucene search

[email protected]CVE-2023-40465

HistoryDec 04, 2023 - 11:15 p.m.

CVE-2023-40465

2023-12-0423:15:26

CWE-787

CWE-122

CWE-121

[email protected]

web.nvd.nist.gov

cve-2023-40465

aleos

vulnerability

third-party component

denial of service

captive portal

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

Several versions of
ALEOS, including ALEOS 4.16.0, include an opensource

third-party
component which can be exploited from the local

area network,
resulting in a Denial of Service condition for the captive portal.

Affected configurations

NVD

Node

sierrawirelessaleosRange≤4.16.0

AND

sierrawirelesses450Match-

sierrawirelessgx450Match-

sierrawirelesslx40Match-

sierrawirelesslx60Match-

sierrawirelessmp70Match-

sierrawirelessrv50xMatch-

sierrawirelessrv55Match-

CPENameOperatorVersion
sierrawireless:aleossierrawireless aleosle4.16.0

CPE	Name	Operator	Version
sierrawireless:aleos	sierrawireless aleos	le	4.16.0

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "ALEOS",
    "vendor": "SierraWireless",
    "versions": [
      {
        "lessThanOrEqual": "4.16",
        "status": "affected",
        "version": "4.10",
        "versionType": "Custom"
      },
      {
        "lessThanOrEqual": "4.9.8",
        "status": "affected",
        "version": "0",
        "versionType": "Custom"
      }
    ]
  }
]

References

source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006/#sthash.6KUVtE6w.dpbs

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

Related for CVE-2023-40465

prion1 cvelist1 nvd1