TI-2023-17188 CVE-2023-34356 · GHSA-p5qp-xrxv-c8wv
OS command injection in Peplink Surf SOHO HW1
Priority HIGH 73
An OS command injection vulnerability exists in the data.cgi xfer_dns functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU).
Vulnerabilities
7 records
TI-2023-12927 CVE-2023-28381 · GHSA-x6x8-jpgv-4ggp
OS command injection in Peplink Surf SOHO HW1
Priority HIGH 73
An OS command injection vulnerability exists in the admin.cgi MVPN_trial_init functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU).
TI-2023-12114 CVE-2023-27380 · GHSA-726f-hhr3-x9g3
OS command injection in Peplink Surf SOHO HW1
Priority HIGH 73
An OS command injection vulnerability exists in the admin.cgi USSD_send functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU).
TI-2023-17186 CVE-2023-34354 · GHSA-qr2h-wj83-58jc
Cross-site scripting in Peplink Surf SOHO HW1
Priority MEDIUM 58
A stored cross-site scripting (XSS) vulnerability exists in the upload_brand.cgi functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU).
TI-2023-17638 CVE-2023-35194 · GHSA-fm3x-p2hq-hwqw
OS command injection in Peplink Surf SOHO HW1
Priority HIGH 73
An OS command injection vulnerability exists in the api.cgi cmd.mvpn.x509.write functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU).
TI-2023-17637 CVE-2023-35193 · GHSA-hgf2-m7q7-2qmp
OS command injection in Peplink Surf SOHO HW1
Priority HIGH 73
An OS command injection vulnerability exists in the api.cgi cmd.mvpn.x509.write functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU).
TI-2020-14857 CVE-2020-24246 · GHSA-873q-6mjj-g9m5
Peplink Balance before 8.1.0rc1 allows an unauthenticated attacker to download PHP…
Priority LOW 35
Peplink Balance before 8.1.0rc1 allows an unauthenticated attacker to download PHP configuration files (/filemanager/php/connector.php) from Web Admin.