Known vulnerabilities in AirLink ALEOS

Vendor: Sierra Wireless
Software: AirLink ALEOS
Software CPE: cpe:2.3:h:sierra_wireless:airlink_aleos:*:*:*:*:*:*:*:*
Website: https://www.sierrawireless.com
Total vulnerabilities: 7
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting AirLink ALEOS AirLink ALEOS is affected by 7 known vulnerabilities: 2 high, 3 medium, 2 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU84003 - Use of Hard-coded Cryptographic Key
CVE-2023-40464		 CWE-321 High
No
No
 4.9.9, 4.17.0 08.12.2023 SB2023120809
#VU84000 - Use of Hard-coded Credentials
CVE-2023-40463		 CWE-798 High
No
No
 4.9.9, 4.17.0 08.12.2023 SB2023120809
#VU83995 - Reachable Assertion
CVE-2023-40462		 CWE-617 Medium
No
No
 4.9.9, 4.17.0 08.12.2023 SB2023120809
SB2024010329
SB2024032742
and 1 more
#VU83994 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-40461		 CWE-79 Low
No
No
 4.9.9, 4.17.0 08.12.2023 SB2023120809
#VU83991 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-40460		 CWE-79 Low
No
No
 4.9.9, 4.17.0 08.12.2023 SB2023120809
#VU83990 - NULL Pointer Dereference
CVE-2023-40459		 CWE-476 Medium
Available
No
 4.9.9, 4.17.0 08.12.2023 SB2023120809
#VU83989 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-40458		 CWE-835 Medium
No
No
 4.9.9, 4.17.0 08.12.2023 SB2023120809