title: Shenzhen Reachfar v28 information exposure
description: Information exposure vulnerability in Shenzhen Reachfar v28, the exploitation of which could allow a remote attacker to retrieve all the week's logs stored in the 'log2' directory. An attacker could retrieve sensitive information such as remembered wifi networks, sent messages, SOS device locations and device configurations.
problem types: CWE-532 Insertion of Sensitive Information into Log File
affected:
{
defaultStatus: unaffected
product: Shenzhen Reachfar v28
vendor: SHENZHEN REACHFAR TECHNOLOGY COMPANY LIMITED
versions:
status: affected, version: all versions
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions: The reported vulnerability has been solved in the latest version of the affected product.