CVE-2023-40464 | BDVDB-2026-218328 Detail

Description#

Several versions of ALEOS, including ALEOS 4.16.0, use a hardcoded SSL certificate and private key. An attacker with access to these items could potentially perform a man in the middle attack between the ACEManager client and ACEManager server.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12023-12-04Record published in the CVE List.
2. Version 22026-02-25Most recent update recorded in the CVE List.