Peplink Balance before 8.1.0rc1 allows an unauthenticated attacker to download PHP…
Priority LOW 35Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
Peplink Balance before 8.1.0rc1 allows an unauthenticated attacker to download PHP configuration files (/filemanager/php/connector.php) from Web Admin.
Why it matters now
EPSS 0.01281 70th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 110
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:peplink:balance_20x_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:balance_20x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:balance_310x_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:balance_310x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:mbx_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:mbx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:epx_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:epx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:sdx_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:sdx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
- cpe:2.3:o:peplink:balance_20x_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:balance_20x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:balance_310x_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:balance_310x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:mbx_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:mbx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:epx_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:epx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:sdx_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:sdx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
Show 100 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:peplink:balance_30_lte_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:balance_30_lte:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:balance_20_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:balance_20:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:balance_30_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:balance_30:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:balance_30_pro_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:balance_30_pro:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:balance_50_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:balance_50:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:balance_one_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:balance_one:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:balance_two_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:balance_two:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:balance_210_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:balance_210:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:balance_310_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:balance_310:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:balance_305_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:balance_305:hw2:*:*:*:*:*:*:* | hw2 | Running on | Peplink |
| cpe:2.3:o:peplink:balance_380_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:balance_380:hw6:*:*:*:*:*:*:* | hw6 | Running on | Peplink |
| cpe:2.3:o:peplink:balance_580_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:balance_580:hw2-3:*:*:*:*:*:*:* | hw2-3 | Running on | Peplink |
| cpe:2.3:o:peplink:balance_710_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:balance_710:hw3:*:*:*:*:*:*:* | hw3 | Running on | Peplink |
| cpe:2.3:o:peplink:balance_1350_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:balance_1350:hw2:*:*:*:*:*:*:* | hw2 | Running on | Peplink |
| cpe:2.3:o:peplink:balance_2500_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:balance_2500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:max_br1_mk2_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:max_br1_mk2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:max_br1_classic_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:max_br1_classic:hw2-3:*:*:*:*:*:*:* | hw2-3 | Running on | Peplink |
| cpe:2.3:o:peplink:max_br1_slim_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:max_br1_slim:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:max_br1_mini_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:max_br1_mini:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:max_br1_m2m_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:max_br1_m2m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:max_br1_ent_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:max_br1_ent:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:max_br1_pro_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:max_br1_pro:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:max_br1__ip67_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:max_br1__ip67:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:max_br2_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:max_br2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:max_br1_ip55_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:max_br1_ip55:hw2-4:*:*:*:*:*:*:* | hw2-4 | Running on | Peplink |
| cpe:2.3:o:peplink:max_br2_ip55_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:max_br2_ip55:hw2-3:*:*:*:*:*:*:* | hw2-3 | Running on | Peplink |
| cpe:2.3:o:peplink:max_hd2_ip67_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:max_hd2_ip67:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:max_hd2_mini_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:max_hd2_mini:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:max_hd2_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:max_hd2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:max_hd1_dome_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:max_hd1_dome:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:max_hd2_dome_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:max_hd2_dome:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:max_hd4_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:max_hd4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:max_hd4_ip67_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:max_hd4_ip67:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:max_transit_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:max_transit:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:max_transit_duo_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:max_transit_duo:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:max_transit_mini_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:max_transit_mini:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:max_hotspot_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:max_hotspot:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:max_on-the-go_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:max_on-the-go:hw2:*:*:*:*:*:*:* | hw2 | Running on | Peplink |
| cpe:2.3:o:peplink:max_700_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:max_700:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:ubr_lte_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:ubr_lte:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:surf_soho_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:surf_soho:hw2:*:*:*:*:*:*:* | hw2 | Running on | Peplink |
| cpe:2.3:o:peplink:surf_soho_mk3_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:surf_soho_mk3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:mediafast_200_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:mediafast_200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:mediafast_500_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:mediafast_500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:mediafast_750_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:mediafast_750:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:mediafast_hd2_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:mediafast_hd2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:mediafast_hd4_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:mediafast_hd4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:speedfusion_sfe_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:speedfusion_sfe:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:speedfusion_sfe_cam_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:speedfusion_sfe_cam:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
| cpe:2.3:o:peplink:fusionhub_firmware:*:*:*:*:*:*:*:* | up to 8.1.0 | Vulnerable | Peplink |
| cpe:2.3:h:peplink:fusionhub:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Peplink |
- cpe:2.3:o:peplink:balance_30_lte_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:balance_30_lte:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:balance_20_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:balance_20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:balance_30_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:balance_30:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:balance_30_pro_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:balance_30_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:balance_50_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:balance_50:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:balance_one_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:balance_one:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:balance_two_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:balance_two:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:balance_210_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:balance_210:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:balance_310_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:balance_310:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:balance_305_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:balance_305:hw2:*:*:*:*:*:*:* Versions hw2 Running on ·Peplink
- cpe:2.3:o:peplink:balance_380_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:balance_380:hw6:*:*:*:*:*:*:* Versions hw6 Running on ·Peplink
- cpe:2.3:o:peplink:balance_580_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:balance_580:hw2-3:*:*:*:*:*:*:* Versions hw2-3 Running on ·Peplink
- cpe:2.3:o:peplink:balance_710_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:balance_710:hw3:*:*:*:*:*:*:* Versions hw3 Running on ·Peplink
- cpe:2.3:o:peplink:balance_1350_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:balance_1350:hw2:*:*:*:*:*:*:* Versions hw2 Running on ·Peplink
- cpe:2.3:o:peplink:balance_2500_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:balance_2500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:max_br1_mk2_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:max_br1_mk2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:max_br1_classic_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:max_br1_classic:hw2-3:*:*:*:*:*:*:* Versions hw2-3 Running on ·Peplink
- cpe:2.3:o:peplink:max_br1_slim_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:max_br1_slim:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:max_br1_mini_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:max_br1_mini:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:max_br1_m2m_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:max_br1_m2m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:max_br1_ent_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:max_br1_ent:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:max_br1_pro_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:max_br1_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:max_br1__ip67_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:max_br1__ip67:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:max_br2_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:max_br2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:max_br1_ip55_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:max_br1_ip55:hw2-4:*:*:*:*:*:*:* Versions hw2-4 Running on ·Peplink
- cpe:2.3:o:peplink:max_br2_ip55_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:max_br2_ip55:hw2-3:*:*:*:*:*:*:* Versions hw2-3 Running on ·Peplink
- cpe:2.3:o:peplink:max_hd2_ip67_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:max_hd2_ip67:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:max_hd2_mini_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:max_hd2_mini:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:max_hd2_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:max_hd2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:max_hd1_dome_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:max_hd1_dome:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:max_hd2_dome_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:max_hd2_dome:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:max_hd4_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:max_hd4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:max_hd4_ip67_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:max_hd4_ip67:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:max_transit_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:max_transit:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:max_transit_duo_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:max_transit_duo:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:max_transit_mini_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:max_transit_mini:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:max_hotspot_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:max_hotspot:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:max_on-the-go_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:max_on-the-go:hw2:*:*:*:*:*:*:* Versions hw2 Running on ·Peplink
- cpe:2.3:o:peplink:max_700_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:max_700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:ubr_lte_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:ubr_lte:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:surf_soho_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:surf_soho:hw2:*:*:*:*:*:*:* Versions hw2 Running on ·Peplink
- cpe:2.3:o:peplink:surf_soho_mk3_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:surf_soho_mk3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:mediafast_200_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:mediafast_200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:mediafast_500_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:mediafast_500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:mediafast_750_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:mediafast_750:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:mediafast_hd2_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:mediafast_hd2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:mediafast_hd4_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:mediafast_hd4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:speedfusion_sfe_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:speedfusion_sfe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:speedfusion_sfe_cam_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:speedfusion_sfe_cam:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
- cpe:2.3:o:peplink:fusionhub_firmware:*:*:*:*:*:*:*:* Versions up to 8.1.0 Vulnerable ·Peplink
- cpe:2.3:h:peplink:fusionhub:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Peplink
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2020-24246
- 2026-10-03 Alias added: GHSA-873q-6mjj-g9m5
References
Sources
- CVE-2020-24246 · CVE Program
- CVE-2020-24246 · NVD
- FIRST EPSS
- GHSA-873q-6mjj-g9m5 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences