CVE-2023-40465

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Dec 4, 2023
Updated: Dec 8, 2023
CWE ID 121
CWE ID 787
CWE ID 122

Summary

CVE-2023-40465 is a vulnerability that affects several versions of ALEOS, including ALEOS 4.16.0. The vulnerability lies in an open-source third-party component and can be exploited from the local area network, leading to a Denial of Service (DoS) condition for the captive portal. The affected products include ZtP0x5, ZtP0x4, ZtP0x7, ZtP0x6, ZtP0x9, and others. The risk score for this vulnerability is 25 out of 100, with a base severity of medium. To remediate this vulnerability, organizations should update to a patched version or implement appropriate security measures to mitigate the risk. The potential danger it poses to an organization is the possibility of a DoS attack on the captive portal, which could disrupt network services and impact user experience.

Leverage our Vulnerability Intelligence module to secure your systems now - get detailed insights on CVE-2024-37364. Book your demo today.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-40465 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options