Peplink Smart Reader Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Peplink Smart Reader Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2023-39367 — CVSS 9.1 (critical): An OS command injection vulnerability exists in the web interface mac2name functionality of Peplink Smart Reader v1.2.0 (in QEMU). A…
• CVE-2023-45744 — CVSS 8.3 (high): A data integrity vulnerability exists in the web interface /cgi-bin/upload_config.cgi functionality of Peplink Smart Reader v1.2.0 (in…
• CVE-2023-40146 — CVSS 6.8 (medium): A privilege escalation vulnerability exists in the /bin/login functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted…
• CVE-2023-43491 — CVSS 5.3 (medium): An information disclosure vulnerability exists in the web interface /cgi-bin/debug_dump.cgi functionality of Peplink Smart Reader v1.2.0…
• CVE-2023-45209 — CVSS 5.3 (medium): An information disclosure vulnerability exists in the web interface /cgi-bin/download_config.cgi functionality of Peplink Smart Reader…