CVE-2023-40463
Use of Hard-Coded Credentials
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 8.1EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
04 Dec 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
When configured in
debugging mode by an authenticated user with
administrative
privileges, ALEOS 4.16 and earlier store the SHA512
hash of the common
root password for that version in a directory
accessible to a user
with root privileges or equivalent access.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
SierraWireless · ALEOSWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →