Description (CNA)
The ACEManager component of ALEOS 4.16 and earlier does not perform input sanitization during authentication, which could potentially result in a Denial of Service (DoS) condition for ACEManager without impairing other router functions. ACEManager recovers from the DoS condition by restarting within ten seconds of becoming unavailable.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SierraWireless / ALEOS | affected 4.10 through 4.16; affected 0 through 4.9.8 |
CWE
CWE-617
References
- https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006/#sthash.6KUVtE6w.dpbs
- https://lists.debian.org/debian-lts-announce/2023/12/msg00024.html
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.