High severity8.3NVD Advisory· Published Apr 17, 2024· Updated Jun 17, 2026
CVE-2023-45744
CVE-2023-45744
Description
A data integrity vulnerability exists in the web interface /cgi-bin/upload_config.cgi functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted HTTP request can lead to configuration modification. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:o:peplink:smart_reader_firmware:1.2.0:*:*:*:*:*:*:*
= 1.2.0+ 1 more
- (no CPE)range: = 1.2.0
- (no CPE)range: v1.2.0 (in QEMU)
Patches
Vulnerability mechanics
References
4- talosintelligence.com/vulnerability_reports/TALOS-2023-1866nvdExploitThird Party Advisory
- forum.peplink.com/t/peplink-security-advisory-smart-reader-firmware-1-2-0-cve-2023-43491-cve-2023-45209-cve-2023-39367-cve-2023-45744-cve-2023-40146/47256nvdVendor Advisory
- security.netapp.com/advisory/ntap-20240828-0006/nvdThird Party Advisory
- www.talosintelligence.com/vulnerability_reports/TALOS-2023-1866nvd
News mentions
0No linked articles in our index yet.