Peplink Balance 305, 380, 580, 710, 1350, 2500 vulnerabilities
4 known CVE vulnerabilities in Peplink Balance 305, 380, 580, 710, 1350, 2500, translated and rated.
- CVE-2017-8841High
Arbitrary file deletion exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before version 7.0.1-build2093. The attack methodology is absolute path traversal in cgi-bin/MANGA/firmware_process.cgi via the upfile.path parameter.
- CVE-2017-8836High
CSRF exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before version 7.0.1-build2093. The CGI scripts in the administrative interface are affected, allowing an attacker to execute commands if a logged-in user visits a malicious website.
- CVE-2017-8837Critical
Cleartext password storage exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before version 7.0.1-build2093. The files in question are /etc/waipass and /etc/roapass, which can be easily read by an attacker.
- CVE-2017-8835Critical
SQL injection exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before version 7.0.1-build2093. An attacker can exploit the bauth cookie to access cgi-bin/MANGA/admin.cgi, allowing for enumeration of user accounts.