CVE-2023-40465: Sierra Wireless ALEOS

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Several versions of ALEOS, including ALEOS 4.16.0, include an opensource third-party component which can be exploited from the local area network, resulting in a Denial of Service condition for the captive portal.

Affected products

• Sierra Wireless ALEOS: up to and including 4.16.0

Published 2023-12-04. Last modified 2026-06-17.