Advisories · Technology

SierraWireless ALEOS.

Every CVE that names SierraWireless ALEOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-40465 CVE record

CVSS 8.3 High

Improper input leads to DoS
- SierraWireless ALEOS
- Memory corruption
Not analysed yet 4 Dec 2023
CVE-2023-40464 CVE record

CVSS 8.1 High

Use of hardcoded certificate and private key
- SierraWireless ALEOS
- Hard-coded credentials
Not analysed yet 4 Dec 2023
CVE-2023-40463 CVE record

CVSS 8.1 High

Use of Hard-Coded Credentials
- SierraWireless ALEOS
- Hard-coded credentials
Not analysed yet 4 Dec 2023
CVE-2023-40462 CVE record

CVSS 7.5 High

Improper input leads to DoS
- SierraWireless ALEOS
- Denial of service
Not analysed yet 4 Dec 2023
CVE-2023-40461 CVE record

CVSS 8.1 High

Cross-site scripting vulnerability in ACEManager
- SierraWireless ALEOS
- Cross-site scripting (XSS)
Not analysed yet 4 Dec 2023
CVE-2023-40460 CVE record

CVSS 7.1 High

Improper input leads to DoS
- SierraWireless ALEOS
- Cross-site scripting (XSS)
- Unrestricted file upload
Not analysed yet 4 Dec 2023
CVE-2023-40459 CVE record

CVSS 7.5 High

Improper input leads to DoS
- SierraWireless ALEOS
- Memory corruption
Not analysed yet 4 Dec 2023
CVE-2023-40458 CVE record

CVSS 7.5 High

AceManager DOS Vulnerability
- sierrawireless ALEOS
- Denial of service
Not analysed yet 29 Nov 2023