CVE-2023-5499CWE-532

Shenzhen Reachfar v28 information exposure

High · published October 10, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
55.0
In the wild
Unconfirmed
What it is

Information exposure vulnerability in Shenzhen Reachfar v28, the exploitation of which could allow a remote attacker to retrieve all the week's logs stored in the 'log2' directory. An attacker could retrieve sensitive information such as remembered wifi networks, sent messages, SOS device locations and device configurations.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00766 · 55.0th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2023-10-10T13:21Z
EPSS history
Timeline
  • 10 OCT 13:21Z
    Shenzhen Reachfar v28 information exposure
    cvelistv5