PT-2023-7523 · Aleos · Aleos

Published 2023-08-14 · Updated 2023-12-08 · CVE-2023-40460

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:S/C:N/I:C/A:P

Name of the Vulnerable Software and Affected Versions ALEOS versions 4.16 and earlier

Description The issue is related to the ACEManager component of the ALEOS operating system, which does not validate uploaded file names and types. This could potentially allow an authenticated user to perform client-side script execution within ACEManager, altering the device functionality until the device is restarted. The exploitation of this issue may enable a remote attacker to execute arbitrary scripts and cause the device to reboot.

Recommendations For ALEOS versions 4.16 and earlier, consider disabling the ACEManager component until a patch is available to prevent potential exploitation. Restrict access to the ACEManager interface to minimize the risk of unauthorized file uploads. As a temporary workaround, limit the types of files that can be uploaded to the device to prevent malicious file execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unrestricted File Upload

XSS

Weakness Enumeration

CWE-434

CWE-79

Related Identifiers

BDU:2023-08572

CVE-2023-40460

Affected Products

Aleos

References · 9

• https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-006/#sthash.5ZcnyPM1.dpbs · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-08572 · Security Note
• https://osv.dev/vulnerability/CVE-2023-40460 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-40460 · Security Note
• https://twitter.com/cracbot/status/1732111531834216839 · Twitter Post
• https://t.me/echeloneyes/2245 · Telegram Post
• https://vuldb.com/ru/?id.246855 · Note
• https://twitter.com/CVEnew/status/1731814830968123600 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-23-341-06 · Note