Description
A privilege escalation vulnerability exists in the /bin/login functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted command line argument can lead to a limited-shell escape and elevated capabilities. An attacker can authenticate with hard-coded credentials and execute unblocked default busybox functionality to trigger this vulnerability.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Peplink Smart Reader
v1.2.0 (in QEMU)affected
References
- https://talosintelligence.com/vulnerability_reports/TALOS-2023-1868 ↗
- https://forum.peplink.com/t/peplink-security-advisory-smart-reader-firmware-1-2-0-cve-2023-43491-cve-2023-45209-cve-2023-39367-cve-2023-45744-cve-2023-40146/47256 ↗
- https://security.netapp.com/advisory/ntap-20240822-0008/ ↗
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1868 ↗