VULNERABILITY INTELLIGENCE

CVE-2023-45744

CVSS score8.8 HIGH

EPSS probability1.31%

CISA KEVNot currently listed

Published2024-04-17

Last modified2026-06-17

Description

A data integrity vulnerability exists in the web interface /cgi-bin/upload_config.cgi functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted HTTP request can lead to configuration modification. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.