Vulnerability · Published Oct 10, 2023 · Assigned by INCIBE
CVE-2023-5499Shenzhen Reachfar v28 information exposure
High 7.5
In plain English
A high-severity sensitive data in logs in Shenzhen Reachfar v28 from SHENZHEN REACHFAR TECHNOLOGY COMPANY LIMITED. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities).
Official description
Information exposure vulnerability in Shenzhen Reachfar v28, the exploitation of which could allow a remote attacker to retrieve all the week's logs stored in the 'log2' directory. An attacker could retrieve sensitive information such as remembered wifi networks, sent messages, SOS device locations and device configurations.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SHENZHEN REACHFAR TECHNOLOGY COMPANY LIMITED | Shenzhen Reachfar v28 | all versions |
Weakness: CWE-532 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N