CVE-2023-40462

The ACEManager component of ALEOS 4.16 and earlier does not perform input sanitization during authentication, which could potentially result in a Denial of Service (DoS) condition for ACEManager without impairing other router functions. ACEManager recovers from the DoS condition by restarting within ten seconds of becoming unavailable.

• CWE-617
• CWE-617

• https://lists.debian.org/debian-lts-announce/2023/12/msg00024.htmlMailing List, Third Party Advisory
• https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006/#sthash.6KUVtE6w.dpbsVendor Advisory
• https://lists.debian.org/debian-lts-announce/2023/12/msg00024.htmlMailing List, Third Party Advisory
• https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006/#sthash.6KUVtE6w.dpbsVendor Advisory

Published

Dec 4, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-40457The BGP daemon in Extreme Networks ExtremeXOS (aka EXOS) 30.…
• CVE-2023-40458Loop with Unreachable Exit Condition ('Infinite Loop') vulne…7.5
• CVE-2023-40459 The ACEManager component of ALEOS 4.16 and earlier …7.5
• CVE-2023-4046In some circumstances, a stale value could have been used fo…5.3
• CVE-2023-40460 The ACEManager component of ALEOS 4.16 and earlier…5.4
• CVE-2023-40461 The ACEManager component of ALEOS 4.16 and earlier…4.8
• CVE-2023-40463 When configured in debugging mode by an authentica…7.2
• CVE-2023-40464 Several versions of ALEOS, including ALEOS 4.16.0,…6.8
• CVE-2023-40465 Several versions of ALEOS, including ALEOS 4.16.0,…5.5
• CVE-2023-40468PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Infor…5.5
• CVE-2023-40469PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Infor…5.5
• CVE-2023-4047A bug in popup notifications delay calculation could have ma…8.8