Peplink

Records24All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high14CVSS 7.0–8.9

Exploited now

Peplink records in CISA KEV

No Peplink vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

1350hw2 Firmware 7 records HIGH 2500 Firmware 7 records HIGH 380hw6 Firmware 7 records HIGH 580hw2 Firmware 7 records HIGH 710hw3 Firmware 7 records HIGH B305hw2 Firmware 7 records HIGH Surf Soho Firmware 7 records HIGH Balance Two Firmware 5 records MEDIUM

Records

7 records in 2500 Firmware · all components

TI-2017-06343 CVE-2017-8835 · GHSA-cwh4-2qh3-3jxc

SQL injection exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with…

HIGH 77

SQL injection exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.61577 Published 2017-06-05 No fix listed CWE-89

TI-2017-06345 CVE-2017-8837 · GHSA-wq46-f9c9-c555

Cleartext password storage exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500…

MEDIUM 50

Cleartext password storage exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04943 Published 2017-06-05 No fix listed CWE-522

TI-2017-06349 CVE-2017-8841 · GHSA-c522-v393-67mg

Arbitrary file deletion exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500…

MEDIUM 42

Arbitrary file deletion exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093.

CVSS 3.0HIGH 8.1 Network Low privileges No interaction EPSS 0.03712 Published 2017-06-05 No fix listed CWE-22

TI-2017-06344 CVE-2017-8836 · GHSA-2mwj-jf28-g57f

CSRF exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware…

MEDIUM 42

CSRF exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01873 Published 2017-06-05 No fix listed CWE-352

TI-2017-06347 CVE-2017-8839 · GHSA-qrf5-g9cq-r2h6

XSS via orig_url exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices…

LOW 31

XSS via orig_url exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01756 Published 2017-06-05 No fix listed CWE-79

TI-2017-06346 CVE-2017-8838 · GHSA-4m44-9r37-q4q5

XSS via syncid exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with…

LOW 31

XSS via syncid exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01794 Published 2017-06-05 No fix listed CWE-79

TI-2017-06348 CVE-2017-8840 · GHSA-5p89-g4ff-g7j6

Debug information disclosure exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500…

LOW 30

Debug information disclosure exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.03568 Published 2017-06-05 No fix listed CWE-200

Open these records in search →

Critical	4
High	14
Medium	6
Low	0
No CVSS	0