Peplink vulnerabilities

Products

• 1350hw2 Firmware 7
• 2500 Firmware 7
• 380hw6 Firmware 7
• 580hw2 Firmware 7
• 710hw3 Firmware 7
• B305hw2 Firmware 7
• Surf Soho Firmware 7
• Surf Soho Hw1 6
• Balance Two Firmware 5
• Smart Reader 5
• Smart Reader 5
• Smart Reader Firmware 5

Newest

• intelbras incontrol, peplink intcontrol 2 +1 more Peplink InControl 2 through 2.14.2 before 2026-06-03 allows use of a semicolon to bypass access... CVE-2026-57920 7.7 HighJune 26, 2026
• peplink smart reader, smart reader firmware +1 more An information disclosure vulnerability exists in the web interface /cgi-bin/download_config.cgi... CVE-2023-45209 5.3 MediumApril 17, 2024
• peplink smart reader, smart reader firmware +1 more An information disclosure vulnerability exists in the web interface /cgi-bin/debug_dump.cgi... CVE-2023-43491 5.3 MediumApril 17, 2024
• peplink smart reader, smart reader firmware +1 more A data integrity vulnerability exists in the web interface /cgi-bin/upload_config.cgi... CVE-2023-45744 8.3 HighApril 17, 2024
• peplink smart reader, smart reader firmware +1 more A privilege escalation vulnerability exists in the /bin/login functionality of Peplink Smart... CVE-2023-40146 6.8 MediumApril 17, 2024
• peplink smart reader, smart reader firmware +1 more An OS command injection vulnerability exists in the web interface mac2name functionality of... CVE-2023-39367 EPSS 37.7% 9.1 CriticalApril 17, 2024
• peplink balance two firmware An issue was discovered in Peplink Balance Two before 8.4.0. A missing authorization check in... CVE-2023-49230 8.8 HighDecember 28, 2023
• peplink balance two firmware An issue was discovered in Peplink Balance Two before 8.4.0. A missing authorization check in the... CVE-2023-49229 4.3 MediumDecember 28, 2023
• peplink balance two firmware An issue was discovered in Peplink Balance Two before 8.4.0. Console port authentication uses... CVE-2023-49228 6.4 MediumDecember 28, 2023
• peplink balance two firmware An issue was discovered in Peplink Balance Two before 8.4.0. Command injection in the traceroute... CVE-2023-49226 7.2 HighDecember 25, 2023
• peplink surf soho hw1, surf soho, surf soho firmware +2 more An OS command injection vulnerability exists in the data.cgi xfer_dns functionality of peplink... CVE-2023-34356 7.2 HighOctober 11, 2023
• peplink surf soho hw1, surf soho firmware +1 more An OS command injection vulnerability exists in the admin.cgi MVPN_trial_init functionality of... CVE-2023-28381 7.2 HighOctober 11, 2023
• peplink surf soho hw1, surf soho firmware +1 more A stored cross-site scripting (XSS) vulnerability exists in the upload_brand.cgi functionality of... CVE-2023-34354 3.4 LowOctober 11, 2023
• peplink surf soho hw1, surf soho firmware +1 more An OS command injection vulnerability exists in the admin.cgi USSD_send functionality of peplink... CVE-2023-27380 7.2 HighOctober 11, 2023
• peplink surf soho hw1, surf soho firmware +1 more An OS command injection vulnerability exists in the api.cgi cmd.mvpn.x509.write functionality of... CVE-2023-35194 7.2 HighOctober 11, 2023
• peplink surf soho hw1, surf soho firmware +1 more An OS command injection vulnerability exists in the api.cgi cmd.mvpn.x509.write functionality of... CVE-2023-35193 7.2 HighOctober 11, 2023
• peplink balance 1350 firmware, balance 20 firmware, balance 20x firmware +52 more +54 more Peplink Balance before 8.1.0rc1 allows an unauthenticated attacker to download PHP configuration... CVE-2020-24246 7.5 HighOctober 7, 2020
• peplink 1350hw2 firmware, 2500 firmware, 380hw6 firmware +3 more +5 more Arbitrary file deletion exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with... CVE-2017-8841 Public exploit 8.1 HighJune 5, 2017
• peplink 1350hw2 firmware, 2500 firmware, 380hw6 firmware +3 more +5 more Debug information disclosure exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices... CVE-2017-8840 Public exploit 5.3 MediumJune 5, 2017
• peplink 1350hw2 firmware, 2500 firmware, 380hw6 firmware +3 more +5 more XSS via orig_url exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with... CVE-2017-8839 Public exploit 6.1 MediumJune 5, 2017
• peplink 1350hw2 firmware, 2500 firmware, 380hw6 firmware +3 more +5 more XSS via syncid exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware... CVE-2017-8838 Public exploit 6.1 MediumJune 5, 2017
• peplink 1350hw2 firmware, 2500 firmware, 380hw6 firmware +3 more +5 more Cleartext password storage exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices... CVE-2017-8837 Public exploit 9.8 CriticalJune 5, 2017
• peplink 1350hw2 firmware, 2500 firmware, 380hw6 firmware +3 more +5 more CSRF exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw... CVE-2017-8836 Public exploit 8.8 HighJune 5, 2017
• peplink 1350hw2 firmware, 2500 firmware, 380hw6 firmware +3 more +5 more SQL injection exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware... CVE-2017-8835 Public exploit EPSS 61.6% 9.8 CriticalJune 5, 2017