CVE-2023-5499

Katalog CVE

CVSS 7.5 · High EPSS 0,77%

Kerentanan Insertion of Sensitive Information into Log File pada reachfargps reachfar gps firmware. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Information exposure vulnerability in Shenzhen Reachfar v28, the exploitation of which could allow a remote attacker to retrieve all the week's logs stored in the 'log2' directory. An attacker could retrieve sensitive information such as remembered wifi networks, sent messages, SOS device locations and device configurations.

Rincian

Terbit di NVD

10 Oktober 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-532: Insertion of Sensitive Information into Log File

EPSS (30 hari)

0,77% peluang dieksploitasi; lebih tinggi dari 54,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.incibe.es/en/incibe-cert/notices/aviso/shenzhen-reachfar-v28-information-exposure advisory pihak ketiga