Lucene search
HistoryFeb 10, 2023 - 6:15 p.m.
CVE-2022-46650
acemanager
aleos
credentials exposure
CVSS3
4.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
AI Score
6
Confidence
High
EPSS
0.001
Percentile
46.2%
Acemanager in ALEOS before version 4.16 allows a user with valid credentials to reconfigure the device to expose the ACEManager credentials on the pre-login status page.
Affected configurations
Node
sierrawirelesses450Match-
ORsierrawirelessgx450Match-
sierrawirelessaleosRange≤4.9.7
Node
sierrawirelesslx40Match-
ORsierrawirelesslx60Match-
ORsierrawirelessmp70Match-
ORsierrawirelessrv50Match-
ORsierrawirelessrv50xMatch-
ORsierrawirelessrv55Match-
sierrawirelessaleosRange≤4.16.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sierrawireless | es450 | - | cpe:2.3:h:sierrawireless:es450:-:*:*:*:*:*:*:* |
| sierrawireless | gx450 | - | cpe:2.3:h:sierrawireless:gx450:-:*:*:*:*:*:*:* |
| sierrawireless | aleos | * | cpe:2.3:o:sierrawireless:aleos:*:*:*:*:*:*:*:* |
| sierrawireless | lx40 | - | cpe:2.3:h:sierrawireless:lx40:-:*:*:*:*:*:*:* |
| sierrawireless | lx60 | - | cpe:2.3:h:sierrawireless:lx60:-:*:*:*:*:*:*:* |
| sierrawireless | mp70 | - | cpe:2.3:h:sierrawireless:mp70:-:*:*:*:*:*:*:* |
| sierrawireless | rv50 | - | cpe:2.3:h:sierrawireless:rv50:-:*:*:*:*:*:*:* |
| sierrawireless | rv50x | - | cpe:2.3:h:sierrawireless:rv50x:-:*:*:*:*:*:*:* |
| sierrawireless | rv55 | - | cpe:2.3:h:sierrawireless:rv55:-:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2022-46650
2023-02-10 00:00:00
cve
cve
CVE-2022-46650
2023-02-10 18:15:13
prion
prion
Code injection
2023-02-10 18:15:00
ics
ics
Sierra Wireless AirLink Router with ALEOS Software
2023-01-26 12:00:00
trellix
trellix
Industrial and Manufacturing CVEs: Addressing the SCADA in the Room
2023-05-22 00:00:00
Industrial and Manufacturing CVEs: Addressing the SCADA in the Room
2023-05-22 00:00:00
thn
thn
CVSS3
4.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
AI Score
6
Confidence
High
EPSS
0.001
Percentile
46.2%
Related for NVD:CVE-2022-46650