Priority MEDIUM 42
Arbitrary file deletion exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093.
CVSS 3.0HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.03712 · Published 2017-06-05 · No fix listed CWE-22
Priority LOW 30
Debug information disclosure exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093.
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03568 · Published 2017-06-05 · No fix listed CWE-200
Priority LOW 31
XSS via orig_url exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01756 · Published 2017-06-05 · No fix listed CWE-79
Priority LOW 31
XSS via syncid exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01794 · Published 2017-06-05 · No fix listed CWE-79
Priority MEDIUM 50
Cleartext password storage exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04943 · Published 2017-06-05 · No fix listed CWE-522
Priority MEDIUM 42
CSRF exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01873 · Published 2017-06-05 · No fix listed CWE-352
Priority HIGH 77
SQL injection exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.61577 · Published 2017-06-05 · No fix listed CWE-89