TI-2023-21277 Aliases CVE-2023-40459 GHSA-mrh4-hf55-27fq

Improper input leads to DoS

MEDIUM 43CWE-476Published 2023-12-04 · Updated 2025-05-29

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-476.

Summary

The ACEManager component of ALEOS 4.16 and earlier does not adequately perform input sanitization during authentication, which could potentially result in a Denial of Service (DoS) condition for ACEManager without impairing other router functions. ACEManager recovers from the DoS condition by restarting within ten seconds of becoming unavailable.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.02296 83rd percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
SierraWireless	ALEOS	4.10 – 4.16; up to 4.9.8	—	No fix listed	CNA

ALEOS VendorSierraWireless Affected 4.10 – 4.16; up to 4.9.8 Fixed in — No fix listed CNA

CPE configurations NVD · 8

CPE	Versions	Role	Vendor
cpe:2.3:o:sierrawireless:aleos::::::::	up to 4.16.0	Vulnerable	SierraWireless
cpe:2.3:h:sierrawireless:es450:-:::::::*	not specified by NVD	Running on	SierraWireless
cpe:2.3:h:sierrawireless:gx450:-:::::::*	not specified by NVD	Running on	SierraWireless
cpe:2.3:h:sierrawireless:lx40:-:::::::*	not specified by NVD	Running on	SierraWireless
cpe:2.3:h:sierrawireless:lx60:-:::::::*	not specified by NVD	Running on	SierraWireless
cpe:2.3:h:sierrawireless:mp70:-:::::::*	not specified by NVD	Running on	SierraWireless
cpe:2.3:h:sierrawireless:rv50x:-:::::::*	not specified by NVD	Running on	SierraWireless
cpe:2.3:h:sierrawireless:rv55:-:::::::*	not specified by NVD	Running on	SierraWireless

cpe:2.3:o:sierrawireless:aleos:*:*:*:*:*:*:*:* Versions up to 4.16.0 Vulnerable ·SierraWireless
cpe:2.3:h:sierrawireless:es450:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SierraWireless
cpe:2.3:h:sierrawireless:gx450:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SierraWireless
cpe:2.3:h:sierrawireless:lx40:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SierraWireless
cpe:2.3:h:sierrawireless:lx60:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SierraWireless
cpe:2.3:h:sierrawireless:mp70:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SierraWireless
cpe:2.3:h:sierrawireless:rv50x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SierraWireless
cpe:2.3:h:sierrawireless:rv55:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SierraWireless

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2023-40459
2026-10-03 Alias added: GHSA-mrh4-hf55-27fq

References

Advisory 1

https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006/#sthash.6KUVtE6w.dpbs

TI-2018-03029 Unrestricted file upload in Sierra Wireless KEVCVSS 3.1HIGH 8.8
TI-2022-23056 OS command injection in ALEOS CVSS 3.1HIGH 8.8
TI-2022-23057 Information disclosure in ALEOS CVSS 3.1MEDIUM 4.9
TI-2019-08887 The ACENet service in Sierra Wireless ALEOS before 4.4.9, 4.5.x through 4.9.x before… CVSS 3.1CRITICAL 9.8
TI-2018-07273 A vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with… CVSS 3.0CRITICAL 9.8
TI-2015-02557 Sierra Wireless ALEOS before 4.4.2 on AirLink ES, GX, and LS devices has hardcoded root… CVSS 2.0HIGH 10.0

See all 29 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences