Sierra Wireless LX60 Gateway
Approved changes feed: RSS · Atom
cpe:2.3:h:sierrawireless:lx60:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Sierrawireless (aaf230a0-10d0-5e89-a0f6-f9dd63c0f7a4) |
|---|---|
| Product | Lx60 (6255cd42-78bd-5b33-b955-8e4efd9d5482) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-40465 |
not_vulnerable | 2026-06-08 06:11:03.282597 |
Improper input leads to DoS
HIGH (8.3)
Several versions of
ALEOS, including ALEOS 4.16.0, include an opensource
third-party
component which can be exploited from the local
area network,
resulting in a Denial of Service condition for the captive portal.
Published: 2023-12-04T23:02:04.103Z
Updated: 2024-08-02T18:31:53.825Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40464 |
not_vulnerable | 2026-06-08 06:11:03.281665 |
Use of hardcoded certificate and private key
HIGH (8.1)
Several versions of
ALEOS, including ALEOS 4.16.0, use a hardcoded
SSL certificate and
private key. An attacker with access to these items
could potentially
perform a man in the middle attack between the
ACEManager client
and ACEManager server.
Published: 2023-12-04T22:59:33.449Z
Updated: 2026-02-25T17:20:06.330Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40463 |
not_vulnerable | 2026-06-08 06:11:03.280597 |
Use of Hard-Coded Credentials
HIGH (8.1)
When configured in
debugging mode by an authenticated user with
administrative
privileges, ALEOS 4.16 and earlier store the SHA512
hash of the common
root password for that version in a directory
accessible to a user
with root privileges or equivalent access.
Published: 2023-12-04T22:57:41.197Z
Updated: 2025-05-29T13:43:19.838Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40462 |
not_vulnerable | 2026-06-08 06:11:03.274828 |
Improper input leads to DoS
HIGH (7.5)
The ACEManager
component of ALEOS 4.16 and earlier does not
perform input
sanitization during authentication, which could
potentially result
in a Denial of Service (DoS) condition for
ACEManager without
impairing other router functions. ACEManager
recovers from the
DoS condition by restarting within ten seconds of
becoming
unavailable.
Published: 2023-12-04T22:53:59.402Z
Updated: 2025-02-13T17:08:24.772Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40461 |
not_vulnerable | 2026-06-08 06:11:03.273708 |
Cross-site scripting vulnerability in ACEManager
HIGH (8.1)
The ACEManager
component of ALEOS 4.16 and earlier allows an
authenticated user
with Administrator privileges to access a file
upload field which
does not fully validate the file name, creating a
Stored Cross-Site
Scripting condition.
Published: 2023-12-04T22:52:13.650Z
Updated: 2026-02-25T17:20:06.671Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40460 |
not_vulnerable | 2026-06-08 06:11:03.272452 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40459 |
not_vulnerable | 2026-06-08 06:11:03.269167 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38321 |
not_vulnerable | 2026-06-08 06:08:17.582789 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46650 |
not_vulnerable | 2026-06-08 05:50:39.076513 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46649 |
not_vulnerable | 2026-06-08 05:50:39.071002 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11851 |
not_vulnerable | 2026-06-08 05:12:38.208480 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.