CVE-2023-40459 PoC — Improper input leads to DoS

Source

https://github.com/7h3w4lk3r/CVE-2023-40459

Associated Vulnerability

Title:Improper input leads to DoS (CVE-2023-40459)
Description: The ACEManager component of ALEOS 4.16 and earlier does not adequately perform input sanitization during authentication, which could potentially result in a Denial of Service (DoS) condition for ACEManager without impairing other router functions. ACEManager recovers from the DoS condition by restarting within ten seconds of becoming unavailable.

Description

CVE-2023-40459 Unauthenticated DoS PoC Exploit

Readme

# CVE-2023-40459
CVE-2023-40459 Unauthenticated DoS PoC Exploit.  
this vulnerability affects the ACEManager component of ALEOS 4.16 and earlier, a product of Sierra Wireless.  

# Usage  
`python3 PoC-CVE-2023-40459.py [Address: http://target]  [Port: 9091]`  

## Refrence  
[NVD](https://nvd.nist.gov/vuln/detail/CVE-2023-40459)  

## Article 
[Double Take Zero Day](https://7h3w4lk3r.medium.com/double-take-zero-day-cve-2023-40459-discovery-951e60e4f331)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!