Skip to content
OpenAdvisories
High · 7.1 CVE-2023-40460 EUVD-2023-45031GHSA-fv86-7h6v-h3qg

Improper input leads to DoS

Published Dec 4, 2023 · Updated Feb 25, 2026 · Assigned by SWI

Vendor: Sierra Wireless Product: ALEOS

Description

The ACEManager
component of ALEOS 4.16 and earlier does not

validate uploaded
file names and types, which could potentially allow

an authenticated
user to perform client-side script execution within

ACEManager, altering
the device functionality until the device is

restarted.

Affected products

VendorProductAffectedFixed
SierraWireless ALEOS 4.10 – ≤ 4.16, ≤ 4.9.8 —

Advisories 1

References