CVE-2023-45209

Опубликовано: 17 апр. 2024

Источник: nvd

CVSS3: 5.3

CVSS3: 7.5

EPSS Низкий

Описание

An information disclosure vulnerability exists in the web interface /cgi-bin/download_config.cgi functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.

Ссылки

https://forum.peplink.com/t/peplink-security-advisory-smart-reader-firmware-1-2-0-cve-2023-43491-cve-2023-45209-cve-2023-39367-cve-2023-45744-cve-2023-40146/47256
Vendor Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1865
Exploit
Third Party Advisory
https://forum.peplink.com/t/peplink-security-advisory-smart-reader-firmware-1-2-0-cve-2023-43491-cve-2023-45209-cve-2023-39367-cve-2023-45744-cve-2023-40146/47256
Vendor Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1865
Exploit
Third Party Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1865

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:peplink:smart_reader_firmware:1.2.0:*:*:*:*:*:*:*

cpe:2.3:h:peplink:smart_reader:-:*:*:*:*:*:*:*

EPSS

Процентиль: 65%

0.00496

Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-284

NVD-CWE-noinfo

Связанные уязвимости

GHSA-597x-3rj2-4p53

CVSS3: 5.3

github

почти 2 года назад

EPSS

Процентиль: 65%

0.00496

Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-284

NVD-CWE-noinfo