1. Home
  2. CVE Database
  3. CVE-2023-40465
HIGH · 8.3

CVE-2023-40465

Several versions of ALEOS, including ALEOS 4.16.0, include an opensource third-party component which can be exploited from the local area network, resulting in a Denial of Service cond...

Vulnerability Description

Several versions of ALEOS, including ALEOS 4.16.0, include an opensource third-party component which can be exploited from the local area network, resulting in a Denial of Service condition for the captive portal.

CVSS Score

8.3

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack Vector
ADJACENT_NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
SierrawirelessAleos<= 4.16.0
SierrawirelessEs450-
SierrawirelessGx450-
SierrawirelessLx40-
SierrawirelessLx60-
SierrawirelessMp70-
SierrawirelessRv50X-
SierrawirelessRv55-

Related Weaknesses (CWE)

CWE-121CWE-122CWE-787

References

FAQ

What is CVE-2023-40465?

CVE-2023-40465 is a vulnerability with a CVSS score of 8.3 (HIGH). Several versions of ALEOS, including ALEOS 4.16.0, include an opensource third-party component which can be exploited from the local area network, resulting in a Denial of Service cond...

How severe is CVE-2023-40465?

CVE-2023-40465 has been rated HIGH with a CVSS base score of 8.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-40465?

Check the references section above for vendor advisories and patch information. Affected products include: Sierrawireless Aleos, Sierrawireless Es450, Sierrawireless Gx450, Sierrawireless Lx40, Sierrawireless Lx60.