CVE-2023-40460 — Improper input leads to DoS
The ACEManager component of ALEOS 4.16 and earlier does not validate uploaded file names and types, which could potentially allow an authenticated user to perfor…
Published: 2023-12-04 · CVSS: 7.1 · CVSS 3.1
The ACEManager component of ALEOS 4.16 and earlier does not validate uploaded file names and types, which could potentially allow an authenticated user to perform client-side script execution within ACEManager, altering the device functionality until the device is restarted.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7