An information disclosure vulnerability exists in the web interface /cgi-bin/debug_dump.cgi functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
Metrics
Affected Vendors & Products
References
History
Wed, 28 Aug 2024 15:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
References |
|
MITRE
Status: PUBLISHED
Assigner: talos
Published: 2024-04-17T12:55:49.894Z
Updated: 2024-08-28T15:02:44.383Z
Reserved: 2023-11-22T15:39:30.258Z
Link: CVE-2023-43491
Vulnrichment
Updated: 2024-08-28T15:02:44.383Z
NVD
Status : Awaiting Analysis
Published: 2024-04-17T13:15:07.370
Modified: 2024-04-17T17:15:12.597
Link: CVE-2023-43491
Redhat
No data.