Medium severity5.3NVD Advisory· Published Apr 17, 2024· Updated Jun 17, 2026
CVE-2023-45209
CVE-2023-45209
Description
An information disclosure vulnerability exists in the web interface /cgi-bin/download_config.cgi functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:o:peplink:smart_reader_firmware:1.2.0:*:*:*:*:*:*:*
= 1.2.0+ 1 more
- (no CPE)range: = 1.2.0
- (no CPE)range: v1.2.0 (in QEMU)
Patches
Vulnerability mechanics
References
3- talosintelligence.com/vulnerability_reports/TALOS-2023-1865nvdExploitThird Party Advisory
- forum.peplink.com/t/peplink-security-advisory-smart-reader-firmware-1-2-0-cve-2023-43491-cve-2023-45209-cve-2023-39367-cve-2023-45744-cve-2023-40146/47256nvdVendor Advisory
- www.talosintelligence.com/vulnerability_reports/TALOS-2023-1865nvd
News mentions
0No linked articles in our index yet.