Skip to content
OpenAdvisories
Medium · 5.3 CVE-2023-45209 EUVD-2023-49516GHSA-597x-3rj2-4p53

An information disclosure vulnerability exists in the web interface /cgi-bin/download_config.cgi functionality of Peplink Smart Reader v1.2…

Published Apr 17, 2024 · Updated Nov 4, 2025 · Assigned by talos

Vendor: Peplink Product: Smart Reader

Description

An information disclosure vulnerability exists in the web interface /cgi-bin/download_config.cgi functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
Peplink Smart Reader v1.2.0 (in QEMU) —

References