CVE-2017-8835
CriticalSummary
SQL injection exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before version 7.0.1-build2093. An attacker can exploit the bauth cookie to access cgi-bin/MANGA/admin.cgi, allowing for enumeration of user accounts.
Risk Assessment
This vulnerability may lead to the exposure of user account information, posing a risk of unauthorized access to the system. Organizations should be aware of potential data security threats.
Recommendation
It is recommended to update the firmware to version 7.0.1-build2093 or later to mitigate this vulnerability. Additionally, monitoring access logs for potential attack attempts is advisable.
Other vulnerabilities in Peplink Balance 305, 380, 580, 710, 1350, 2500
See all- CVE-2017-8841High
Arbitrary file deletion exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before version 7.0.1-build2093. The attack methodology is absolute path traversal in cgi-bin/MANGA/firmware_process.cgi via the upfile.path parameter.
- CVE-2017-8836High
CSRF exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before version 7.0.1-build2093. The CGI scripts in the administrative interface are affected, allowing an attacker to execute commands if a logged-in user visits a malicious website.
- CVE-2017-8837Critical
Cleartext password storage exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before version 7.0.1-build2093. The files in question are /etc/waipass and /etc/roapass, which can be easily read by an attacker.
Original NVD description (English source)
SQL injection exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. An attack vector is the bauth cookie to cgi-bin/MANGA/admin.cgi. One impact is enumeration of user accounts by observing whether a session ID can be retrieved from the sessions database.