Lucene search

K
cvelistSWICVELIST:CVE-2023-40462
HistoryDec 04, 2023 - 10:53 p.m.

CVE-2023-40462 Improper input leads to DoS

2023-12-0422:53:59
CWE-617
SWI
raw.githubusercontent.com
acemanager
aleos
input sanitization
vulnerability
dos

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.5%

The ACEManager
component of ALEOS 4.16 and earlier does not

perform input
sanitization during authentication, which could

potentially result
in a Denial of Service (DoS) condition for

ACEManager without
impairing other router functions. ACEManager

recovers from the
DoS condition by restarting within ten seconds of

becoming
unavailable.

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.5%