CVE-2023-39367

2024-04-1712:55:47

CWE-78

talos

raw.githubusercontent.com

command injection

peplink smart reader

web interface

http request

vulnerability

arbitrary command execution

qemu

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.5%

JSON

An OS command injection vulnerability exists in the web interface mac2name functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.