CVE-2023-45209

An information disclosure vulnerability exists in the web interface /cgi-bin/download_config.cgi functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.

• CWE-284

• https://forum.peplink.com/t/peplink-security-advisory-smart-reader-firmware-1-2-0-cve-2023-43491-cve-2023-45209-cve-2023-39367-cve-2023-45744-cve-2023-40146/47256Vendor Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2023-1865Exploit, Third Party Advisory
• https://forum.peplink.com/t/peplink-security-advisory-smart-reader-firmware-1-2-0-cve-2023-43491-cve-2023-45209-cve-2023-39367-cve-2023-45744-cve-2023-40146/47256Vendor Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2023-1865Exploit, Third Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1865

Published

Apr 17, 2024

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-45203Online Examination System v1.0 is vulnerable to multiple Ope…6.1
• CVE-2023-45204A vulnerability has been identified in Tecnomatix Plant Simu…7.8
• CVE-2023-45205A vulnerability has been identified in SICAM PAS/PQS (All ve…7.8
• CVE-2023-45206An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15…6.1
• CVE-2023-45207An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15…6.1
• CVE-2023-45208A command injection in the parsing_xml_stasurvey function in…8.8
• CVE-2023-4521The Import XML and RSS Feeds WordPress plugin before 2.1.5 c…9.8
• CVE-2023-45210Pleasanter 1.3.47.0 and earlier contains an improper access …4.3
• CVE-2023-45213 A potential attacker with access to the Westermo Lynx…6.5
• CVE-2023-45215A stack-based buffer overflow vulnerability exists in the bo…7.2
• CVE-2023-45217Improper access control in Intel(R) Power Gadget software fo…7.8
• CVE-2023-45219 Exposure of Sensitive Information vulnerability exist in an…4.4