Peplink

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-45744 1Peplink 1Smart Reader Firmware Nov 4, 2025 Apr 17, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 A data integrity vulnerability exists in the web interface /cgi-bin/upload_config.cgi functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted HTTP request can lead to configuration modification. An at...Show more A data integrity vulnerability exists in the web interface /cgi-bin/upload_config.cgi functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted HTTP request can lead to configuration modification. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.Show less
CVE-2023-45209 1Peplink 1Smart Reader Firmware Nov 4, 2025 Apr 17, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 An information disclosure vulnerability exists in the web interface /cgi-bin/download_config.cgi functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted HTTP request can lead to a disclosure of sensit...Show more An information disclosure vulnerability exists in the web interface /cgi-bin/download_config.cgi functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.Show less
CVE-2023-43491 1Peplink 1Smart Reader Firmware Nov 4, 2025 Apr 17, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 An information disclosure vulnerability exists in the web interface /cgi-bin/debug_dump.cgi functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted HTTP request can lead to a disclosure of sensitive i...Show more An information disclosure vulnerability exists in the web interface /cgi-bin/debug_dump.cgi functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.Show less
CVE-2023-40146 1Peplink 1Smart Reader Firmware Nov 4, 2025 Apr 17, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A privilege escalation vulnerability exists in the /bin/login functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted command line argument can lead to a limited-shell escape and elevated capabilities...Show more A privilege escalation vulnerability exists in the /bin/login functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted command line argument can lead to a limited-shell escape and elevated capabilities. An attacker can authenticate with hard-coded credentials and execute unblocked default busybox functionality to trigger this vulnerability.Show less
CVE-2023-39367 1Peplink 1Smart Reader Firmware Nov 4, 2025 Apr 17, 2024 N/A· v4 7.2 HIGH· v3 N/A· v2 An OS command injection vulnerability exists in the web interface mac2name functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted HTTP request can lead to arbitrary command execution. An attacker can...Show more An OS command injection vulnerability exists in the web interface mac2name functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.Show less
CVE-2023-49230 1Peplink 1Balance Two Firmware Nov 21, 2024 Dec 28, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 An issue was discovered in Peplink Balance Two before 8.4.0. A missing authorization check in captive portals allows attackers to modify the portals' configurations without prior authentication.
CVE-2023-49229 1Peplink 1Balance Two Firmware Nov 21, 2024 Dec 28, 2023 N/A· v4 4.3 MEDIUM· v3 N/A· v2 An issue was discovered in Peplink Balance Two before 8.4.0. A missing authorization check in the administration web service allows read-only, unprivileged users to obtain sensitive information about the device configura...Show more An issue was discovered in Peplink Balance Two before 8.4.0. A missing authorization check in the administration web service allows read-only, unprivileged users to obtain sensitive information about the device configuration.Show less
CVE-2023-49228 1Peplink 1Balance Two Firmware Nov 21, 2024 Dec 28, 2023 N/A· v4 6.4 MEDIUM· v3 N/A· v2 An issue was discovered in Peplink Balance Two before 8.4.0. Console port authentication uses hard-coded credentials, which allows an attacker with physical access and sufficient knowledge to execute arbitrary commands a...Show more An issue was discovered in Peplink Balance Two before 8.4.0. Console port authentication uses hard-coded credentials, which allows an attacker with physical access and sufficient knowledge to execute arbitrary commands as root.Show less
CVE-2023-49226 1Peplink 1Balance Two Firmware Nov 21, 2024 Dec 25, 2023 N/A· v4 7.2 HIGH· v3 N/A· v2 An issue was discovered in Peplink Balance Two before 8.4.0. Command injection in the traceroute feature of the administration console allows users with admin privileges to execute arbitrary commands as root.
CVE-2023-35194 1Peplink 1Surf Soho Firmware Nov 4, 2025 Oct 11, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 An OS command injection vulnerability exists in the api.cgi cmd.mvpn.x509.write functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). A specially crafted HTTP request can lead to command execution. An attacker can mak...Show more An OS command injection vulnerability exists in the api.cgi cmd.mvpn.x509.write functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). A specially crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.This vulnerability is specifically for the `system` call in the file `/web/MANGA/cgi-bin/api.cgi` for firmware version 6.3.5 at offset `0x4bde44`.Show less
CVE-2023-35193 1Peplink 1Surf Soho Firmware Nov 4, 2025 Oct 11, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 An OS command injection vulnerability exists in the api.cgi cmd.mvpn.x509.write functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). A specially crafted HTTP request can lead to command execution. An attacker can mak...Show more An OS command injection vulnerability exists in the api.cgi cmd.mvpn.x509.write functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). A specially crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.This vulnerability is specifically for the `system` call in the file `/web/MANGA/cgi-bin/api.cgi` for firmware version 6.3.5 at offset 0x4bddb8.Show less
CVE-2023-34356 1Peplink 1Surf Soho Firmware Nov 4, 2025 Oct 11, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 An OS command injection vulnerability exists in the data.cgi xfer_dns functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). A specially crafted HTTP request can lead to command execution. An attacker can make an authe...Show more An OS command injection vulnerability exists in the data.cgi xfer_dns functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). A specially crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.Show less
CVE-2023-34354 1Peplink 1Surf Soho Firmware Nov 4, 2025 Oct 11, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 A stored cross-site scripting (XSS) vulnerability exists in the upload_brand.cgi functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). A specially crafted HTTP request can lead to execution of arbitrary javascript in...Show more A stored cross-site scripting (XSS) vulnerability exists in the upload_brand.cgi functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). A specially crafted HTTP request can lead to execution of arbitrary javascript in another user's browser. An attacker can make an authenticated HTTP request to trigger this vulnerability.Show less
CVE-2023-28381 1Peplink 1Surf Soho Firmware Nov 4, 2025 Oct 11, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 An OS command injection vulnerability exists in the admin.cgi MVPN_trial_init functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). A specially crafted HTTP request can lead to command execution. An attacker can make...Show more An OS command injection vulnerability exists in the admin.cgi MVPN_trial_init functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). A specially crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.Show less
CVE-2023-27380 1Peplink 1Surf Soho Firmware Nov 21, 2024 Oct 11, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 An OS command injection vulnerability exists in the admin.cgi USSD_send functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). A specially crafted HTTP request can lead to command execution. An attacker can make an aut...Show more An OS command injection vulnerability exists in the admin.cgi USSD_send functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). A specially crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.Show less
CVE-2020-24246 1Peplink 55Balance 1350 Firmware Balance 20 FirmwareBalance 20x Firmware+52 more Nov 21, 2024 Oct 7, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Peplink Balance before 8.1.0rc1 allows an unauthenticated attacker to download PHP configuration files (/filemanager/php/connector.php) from Web Admin.
CVE-2017-8841 1Peplink 61350hw2 Firmware 2500 Firmware380hw6 Firmware+3 more May 13, 2026 Jun 5, 2017 N/A· v4 8.1 HIGH· v3 7.5 HIGH· v2 Arbitrary file deletion exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. The attack methodology is absolute path trav...Show more Arbitrary file deletion exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. The attack methodology is absolute path traversal in cgi-bin/MANGA/firmware_process.cgi via the upfile.path parameter.Show less
CVE-2017-8840 1Peplink 61350hw2 Firmware 2500 Firmware380hw6 Firmware+3 more May 13, 2026 Jun 5, 2017 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Debug information disclosure exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. A direct request to cgi-bin/HASync/hasy...Show more Debug information disclosure exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. A direct request to cgi-bin/HASync/hasync.cgi?debug=1 shows Master LAN Address, Serial Number, HA Group ID, Virtual IP, and Submitted syncid.Show less
CVE-2017-8839 1Peplink 61350hw2 Firmware 2500 Firmware380hw6 Firmware+3 more May 13, 2026 Jun 5, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 XSS via orig_url exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. The affected script is guest/preview.cgi.
CVE-2017-8838 1Peplink 61350hw2 Firmware 2500 Firmware380hw6 Firmware+3 more May 13, 2026 Jun 5, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 XSS via syncid exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. The affected script is cgi-bin/HASync/hasync.cgi.

12 Next