Medium severity6.8NVD Advisory· Published Apr 17, 2024· Updated Jun 17, 2026
CVE-2023-40146
CVE-2023-40146
Description
A privilege escalation vulnerability exists in the /bin/login functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted command line argument can lead to a limited-shell escape and elevated capabilities. An attacker can authenticate with hard-coded credentials and execute unblocked default busybox functionality to trigger this vulnerability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:o:peplink:smart_reader_firmware:1.2.0:*:*:*:*:*:*:*
= 1.2.0+ 1 more
- (no CPE)range: = 1.2.0
- (no CPE)range: v1.2.0 (in QEMU)
Patches
Vulnerability mechanics
References
4- talosintelligence.com/vulnerability_reports/TALOS-2023-1868nvdExploitThird Party Advisory
- forum.peplink.com/t/peplink-security-advisory-smart-reader-firmware-1-2-0-cve-2023-43491-cve-2023-45209-cve-2023-39367-cve-2023-45744-cve-2023-40146/47256nvdVendor Advisory
- security.netapp.com/advisory/ntap-20240822-0008/nvdThird Party Advisory
- www.talosintelligence.com/vulnerability_reports/TALOS-2023-1868nvd
News mentions
0No linked articles in our index yet.