Improper input leads to DoS
CVE-2023-40465

5.5MEDIUM

Key Information:

What is CVE-2023-40465?

Several versions of ALEOS, including ALEOS 4.16.0, include an opensource

third-party component which can be exploited from the local

area network, resulting in a Denial of Service condition for the captive portal.

ALEOS 4.10 <= 4.16

ALEOS 0 <= 4.9.8

Score:

5.5

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet