Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

peplink / balance_two CVEs

Beta · best-effort

5 CVEs tagged to peplink / balance_two — 0 Critical, 3 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to peplink vendor archive

CVE-2023-49230

Published Dec 28, 2023

An issue was discovered in Peplink Balance Two before 8.4.0. A missing authorization check in captive portals allows attackers to modify the portals' configurations without prior…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2023-49229

Published Dec 28, 2023

An issue was discovered in Peplink Balance Two before 8.4.0. A missing authorization check in the administration web service allows read-only, unprivileged users to obtain sensiti…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2023-49228

Published Dec 28, 2023

An issue was discovered in Peplink Balance Two before 8.4.0. Console port authentication uses hard-coded credentials, which allows an attacker with physical access and sufficient…

CVSS 6.4 · Medium

Vendor/product tagsBeta · best-effort

CVE-2023-49226

Published Dec 25, 2023

An issue was discovered in Peplink Balance Two before 8.4.0. Command injection in the traceroute feature of the administration console allows users with admin privileges to execut…

CVSS 7.2 · High

Vendor/product tagsBeta · best-effort

CVE-2020-24246

Published Oct 7, 2020

Peplink Balance before 8.1.0rc1 allows an unauthenticated attacker to download PHP configuration files (/filemanager/php/connector.php) from Web Admin.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1