CVE-2023-5499

CVE-2023-5499 is an information exposure vulnerability affecting Shenzhen Reachfar v28 GPS devices and firmware. A remote attacker can exploit this flaw to retrieve all weekly logs from the 'log2' directory, potentially exposing sensitive data like Wi-Fi networks, messages, SOS locations, and device configurations. With a CVSS score of 7.5 (High), this vulnerability requires no user interaction and has low attack complexity, allowing for direct remote exploitation. There is currently no public exploit code available, nor is there evidence of active exploitation or significant community discussion.