Skip to main content

Balance Two Firmware

5 CVEs product

Monthly

CVE-2023-49230 Dec 28, 04:15 HIGH POC This Week

An issue was discovered in Peplink Balance Two before 8.4.0. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Balance Two Firmware Peplink
NVD
CVSS 3.1
8.8
EPSS
2.1%
CVE-2023-49229 Dec 28, 04:15 MEDIUM POC This Month

An issue was discovered in Peplink Balance Two before 8.4.0. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Balance Two Firmware Peplink
NVD
CVSS 3.1
4.3
EPSS
0.5%
CVE-2023-49228 Dec 28, 04:15 MEDIUM POC This Month

An issue was discovered in Peplink Balance Two before 8.4.0. Rated medium severity (CVSS 6.4), this vulnerability is no authentication required. Public exploit code available and no vendor patch available.

Authentication Bypass Balance Two Firmware Peplink
NVD
CVSS 3.1
6.4
EPSS
0.5%
CVE-2023-49226 Dec 25, 08:15 HIGH POC This Week

An issue was discovered in Peplink Balance Two before 8.4.0. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Balance Two Firmware Peplink
NVD
CVSS 3.1
7.2
EPSS
3.4%
CVE-2020-24246 Oct 07, 16:15 HIGH POC This Week

Peplink Balance before 8.1.0rc1 allows an unauthenticated attacker to download PHP configuration files (/filemanager/php/connector.php) from Web Admin. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Information Disclosure Balance 20X Firmware Balance 310X Firmware Mbx Firmware +53
NVD
CVSS 3.1
7.5
EPSS
1.3%
EPSS 2% CVSS 8.8
HIGH POC This Week

An issue was discovered in Peplink Balance Two before 8.4.0. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Balance Two Firmware Peplink
NVD
EPSS 0% CVSS 4.3
MEDIUM POC This Month

An issue was discovered in Peplink Balance Two before 8.4.0. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Balance Two Firmware Peplink
NVD
EPSS 0% CVSS 6.4
MEDIUM POC This Month

An issue was discovered in Peplink Balance Two before 8.4.0. Rated medium severity (CVSS 6.4), this vulnerability is no authentication required. Public exploit code available and no vendor patch available.

Authentication Bypass Balance Two Firmware Peplink
NVD
EPSS 3% CVSS 7.2
HIGH POC This Week

An issue was discovered in Peplink Balance Two before 8.4.0. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Balance Two Firmware Peplink
NVD
EPSS 1% CVSS 7.5
HIGH POC This Week

Peplink Balance before 8.1.0rc1 allows an unauthenticated attacker to download PHP configuration files (/filemanager/php/connector.php) from Web Admin. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Information Disclosure Balance 20X Firmware +55
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy