Smart Reader
Approved changes feed: RSS · Atom
cpe:2.3:a:peplink:smart_reader:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Peplink (7fd66203-db7b-5fc4-b96c-b7b360912c0b) |
|---|---|
| Product | Smart Reader (db1bd031-0bb5-5bb1-a959-62852b64b59a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-45744 |
vulnerable | 2026-06-08 06:12:43.202821 |
Details available
HIGH (8.3)
A data integrity vulnerability exists in the web interface /cgi-bin/upload_config.cgi functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted HTTP request can lead to configuration modification. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
Published: 2024-04-17T12:55:48.462Z
Updated: 2025-11-04T18:17:46.118Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45209 |
vulnerable | 2026-06-08 06:12:42.290585 |
Details available
MEDIUM (5.3)
An information disclosure vulnerability exists in the web interface /cgi-bin/download_config.cgi functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
Published: 2024-04-17T12:55:49.210Z
Updated: 2025-11-04T18:17:29.815Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43491 |
vulnerable | 2026-06-08 06:12:31.693518 |
Details available
MEDIUM (5.3)
An information disclosure vulnerability exists in the web interface /cgi-bin/debug_dump.cgi functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
Published: 2024-04-17T12:55:49.894Z
Updated: 2025-11-04T18:17:26.146Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40146 |
vulnerable | 2026-06-08 06:09:41.296265 |
Details available
MEDIUM (6.8)
A privilege escalation vulnerability exists in the /bin/login functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted command line argument can lead to a limited-shell escape and elevated capabilities. An attacker can authenticate with hard-coded credentials and execute unblocked default busybox functionality to trigger this vulnerability.
Published: 2024-04-17T12:55:47.083Z
Updated: 2025-11-04T18:16:38.419Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39367 |
vulnerable | 2026-06-08 06:09:37.222599 |
Details available
CRITICAL (9.1)
An OS command injection vulnerability exists in the web interface mac2name functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Published: 2024-04-17T12:55:47.790Z
Updated: 2025-11-04T18:16:28.588Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.