Improper input leads to DoS
CVE-2023-40460

5.4MEDIUM

Key Information:

What is CVE-2023-40460?

The ACEManager component of ALEOS 4.16 and earlier does not

validate uploaded file names and types, which could potentially allow

an authenticated user to perform client-side script execution within

ACEManager, altering the device functionality until the device is

restarted.

ALEOS 4.10 <= 4.16

ALEOS 0 <= 4.9.8

Score:

5.4

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet