Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-40458
HistoryNov 29, 2023 - 12:00 a.m.

CVE-2023-40458

2023-11-2900:00:00
ubuntu.com
ubuntu.com
12
sierra wireless aleos
acemanager
dos
remote attacker
unreachable exit condition
router functions

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

33.0%

Loop with Unreachable Exit Condition (‘Infinite Loop’) vulnerability in
Sierra Wireless, Inc ALEOS could potentially allow a remote attacker to
trigger a Denial of Service (DoS) condition for ACEManager without
impairing other router functions. This condition is cleared by restarting
the device.

Bugs

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

33.0%

Related for UB:CVE-2023-40458