Read the docs

Peplink

Records24All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high14CVSS 7.0–8.9

Exploited now

Peplink records in CISA KEV

No Peplink vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
1350hw2 Firmware 7 records HIGH 2500 Firmware 7 records HIGH 380hw6 Firmware 7 records HIGH 580hw2 Firmware 7 records HIGH 710hw3 Firmware 7 records HIGH B305hw2 Firmware 7 records HIGH Surf Soho Firmware 7 records HIGH Balance Two Firmware 5 records MEDIUM

Records

7 records in Surf Soho Firmware · all components

TI-2023-17638 CVE-2023-35194 · GHSA-fm3x-p2hq-hwqw

OS command injection in Peplink Surf SOHO HW1

Priority HIGH 73

An OS command injection vulnerability exists in the api.cgi cmd.mvpn.x509.write functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0519 Published 2023-10-11 No fix listed CWE-78
TI-2023-17637 CVE-2023-35193 · GHSA-hgf2-m7q7-2qmp

OS command injection in Peplink Surf SOHO HW1

Priority HIGH 73

An OS command injection vulnerability exists in the api.cgi cmd.mvpn.x509.write functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0519 Published 2023-10-11 No fix listed CWE-78
TI-2023-17188 CVE-2023-34356 · GHSA-p5qp-xrxv-c8wv

OS command injection in Peplink Surf SOHO HW1

Priority HIGH 73

An OS command injection vulnerability exists in the data.cgi xfer_dns functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.05105 Published 2023-10-11 No fix listed CWE-78
TI-2023-12927 CVE-2023-28381 · GHSA-x6x8-jpgv-4ggp

OS command injection in Peplink Surf SOHO HW1

Priority HIGH 73

An OS command injection vulnerability exists in the admin.cgi MVPN_trial_init functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.06073 Published 2023-10-11 No fix listed CWE-78
TI-2023-12114 CVE-2023-27380 · GHSA-726f-hhr3-x9g3

OS command injection in Peplink Surf SOHO HW1

Priority HIGH 73

An OS command injection vulnerability exists in the admin.cgi USSD_send functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.05905 Published 2023-10-11 No fix listed CWE-78
TI-2023-17186 CVE-2023-34354 · GHSA-qr2h-wj83-58jc

Cross-site scripting in Peplink Surf SOHO HW1

Priority MEDIUM 58

A stored cross-site scripting (XSS) vulnerability exists in the upload_brand.cgi functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00814 Published 2023-10-11 No fix listed CWE-80
Open these records in search →