CVE-2017-8837
CriticalSummary
Cleartext password storage exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before version 7.0.1-build2093. The files in question are /etc/waipass and /etc/roapass, which can be easily read by an attacker.
Risk Assessment
If one of these devices is compromised, the attacker can gain access to passwords and abuse them to compromise further systems, posing a serious threat to the organization's security.
Recommendation
It is recommended to update the firmware to version 7.0.1-build2093 or later to eliminate the issue of storing passwords in cleartext.
Original NVD description (English source)
Cleartext password storage exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. The files in question are /etc/waipass and /etc/roapass. In case one of these devices is compromised, the attacker can gain access to passwords and abuse them to compromise further systems.