VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 17, 2024· Updated Nov 4, 2025

CVE-2023-40146

CVE-2023-40146

Description

A privilege escalation vulnerability exists in the /bin/login functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted command line argument can lead to a limited-shell escape and elevated capabilities. An attacker can authenticate with hard-coded credentials and execute unblocked default busybox functionality to trigger this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Peplink/Smart Readerllm-fuzzy2 versions
    = v1.2.0 (in QEMU)+ 1 more
    • (no CPE)range: = v1.2.0 (in QEMU)
    • (no CPE)range: v1.2.0 (in QEMU)

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.