CVE-2022-46649
HIGH 8.8EPSS 2.3%
Acemanager in ALEOS before version 4.16 allows a user with valid credentials to manipulate the IP logging operation to execute arbitrary shell commands on the device.
- Affected
- ALEOS
- CVSS v3.1 NVD
- 8.8 HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- 2.28% chance of exploitation in the next 30 days, 83rd percentile
- Published
- 2023-02-10
- Updated
- 2025-03-24
Proof-of-concept exploits (1)
- KaraFlow/CVE-2022-466490★ · 2026-04-25
Security advisories
- https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-…
- https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-04
- https://www.otorio.com/blog/airlink-acemanager-vulnerabilities