CVE-2023-40465

Several versions of ALEOS, including ALEOS 4.16.0, include an opensource third-party component which can be exploited from the local area network, resulting in a Denial of Service condition for the captive portal.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006/#sthash.6KUVtE6w.dpbs	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:sierrawireless:aleos:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:sierrawireless:es450:-:::::::*
	cpe:2.3:h:sierrawireless:gx450:-:::::::*
	cpe:2.3:h:sierrawireless:lx40:-:::::::*
	cpe:2.3:h:sierrawireless:lx60:-:::::::*
	cpe:2.3:h:sierrawireless:mp70:-:::::::*
	cpe:2.3:h:sierrawireless:rv50x:-:::::::*
	cpe:2.3:h:sierrawireless:rv55:-:::::::*

History

08 Dec 2023, 15:44

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 5.5
References	~~() https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006/#sthash.6KUVtE6w.dpbs -~~	() https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006/#sthash.6KUVtE6w.dpbs - Vendor Advisory
CPE		cpe:2.3:h:sierrawireless:lx40:-:::::::* cpe:2.3:h:sierrawireless:mp70:-:::::::* cpe:2.3:h:sierrawireless:rv55:-:::::::* cpe:2.3:h:sierrawireless:lx60:-:::::::* cpe:2.3:h:sierrawireless:rv50x:-:::::::* cpe:2.3:h:sierrawireless:es450:-:::::::* cpe:2.3:h:sierrawireless:gx450:-:::::::* cpe:2.3:o:sierrawireless:aleos::::::::
CWE		CWE-787

04 Dec 2023, 23:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-12-04 23:15

Updated : 2024-02-05 00:22

NVD link : CVE-2023-40465

Mitre link : CVE-2023-40465

CVE.ORG link : CVE-2023-40465

JSON object : View

Products Affected

sierrawireless

lx40
es450
rv50x
rv55
gx450
lx60
aleos
mp70

CWE

CWE-787

Out-of-bounds Write

CWE-121

Stack-based Buffer Overflow

CWE-122

Heap-based Buffer Overflow

{"id": "CVE-2023-40465", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}, {"type": "Secondary", "source": "security@sierrawireless.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.3, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 1.6}]}, "published": "2023-12-04T23:15:26.247", "references": [{"url": "https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006/#sthash.6KUVtE6w.dpbs", "tags": ["Vendor Advisory"], "source": "security@sierrawireless.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-787"}]}, {"type": "Secondary", "source": "security@sierrawireless.com", "description": [{"lang": "en", "value": "CWE-121"}, {"lang": "en", "value": "CWE-122"}]}], "descriptions": [{"lang": "en", "value": "\n\n\n\n\n\n\n\n\n\nSeveral versions of\nALEOS, including ALEOS 4.16.0, include an opensource\n\n\n\nthird-party\ncomponent which can be exploited from the local\n\n\n\narea network,\nresulting in a Denial of Service condition for the captive portal.\n\n\n\n\n\n\n\n"}, {"lang": "es", "value": "Varias versiones de ALEOS, incluida ALEOS 4.16.0, incluyen un componente de terceros de c\u00f3digo abierto que puede explotarse desde la red de \u00e1rea local, lo que genera una condici\u00f3n de denegaci\u00f3n de servicio para el portal cautivo."}], "lastModified": "2023-12-08T15:44:51.933", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sierrawireless:aleos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "45265DDA-E10F-49D0-B2C6-FC123C42E5AE", "versionEndIncluding": "4.16.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sierrawireless:es450:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "524DF1AE-21F2-4AA6-99E7-6F98304FF845"}, {"criteria": "cpe:2.3:h:sierrawireless:gx450:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2C12CF71-FE0E-44EA-9F2E-7CFB42E7C216"}, {"criteria": "cpe:2.3:h:sierrawireless:lx40:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "069DD303-C100-4FAF-BD6B-4EE61CBDE9F7"}, {"criteria": "cpe:2.3:h:sierrawireless:lx60:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2A3B7B3D-1594-434B-8E22-01C67DF54F16"}, {"criteria": "cpe:2.3:h:sierrawireless:mp70:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "007D4629-4BE2-4C7A-AC8B-E87739E22D12"}, {"criteria": "cpe:2.3:h:sierrawireless:rv50x:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "61D3EF27-E823-4E49-BD58-D050EB02D294"}, {"criteria": "cpe:2.3:h:sierrawireless:rv55:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "215BD4AB-8EFD-4F82-ABE4-E7F81AD528C2"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "security@sierrawireless.com"}