Improper input leads to DoS

CVE-2023-40462

What is CVE-2023-40462?

The ACEManager component in ALEOS 4.16 and earlier versions is susceptible to a Denial of Service (DoS) due to inadequate input sanitization during the authentication process. This vulnerability can cause ACEManager to become temporarily unavailable, though it does not affect the overall functionality of the router. The system is capable of recovering from the DoS condition automatically, restarting within ten seconds after it becomes unresponsive.

References