Description
The ACEManager
component of ALEOS 4.16 and earlier does not
perform input
sanitization during authentication, which could
potentially result
in a Denial of Service (DoS) condition for
ACEManager without
impairing other router functions. ACEManager
recovers from the
DoS condition by restarting within ten seconds of
becoming
unavailable.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SierraWireless | ALEOS | 4.10 – ≤ 4.16, ≤ 4.9.8 | — |
Advisories 1
- ICSA-23-341-06 Sierra Wireless AirLink with ALEOS firmware CISA ICS & IT advisories · Dec 7, 2023