Peplink Balance 380
Approved changes feed: RSS · Atom
cpe:2.3:h:peplink:balance_380:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Peplink (7fd66203-db7b-5fc4-b96c-b7b360912c0b) |
|---|---|
| Product | Balance 380 (83e7187b-9b9e-5a85-a656-1d651dd6adce) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-8841 |
not_vulnerable | 2026-06-08 05:10:08.981116 |
Details available
Arbitrary file deletion exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. The attack methodology is absolute path traversal in cgi-bin/MANGA/firmware_process.cgi via the upfile.path parameter.
Published: 2017-06-05T14:00:00.000Z
Updated: 2024-08-05T16:48:22.693Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8840 |
not_vulnerable | 2026-06-08 05:10:08.980511 |
Details available
Debug information disclosure exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. A direct request to cgi-bin/HASync/hasync.cgi?debug=1 shows Master LAN Address, Serial Number, HA Group ID, Virtual IP, and Submitted syncid.
Published: 2017-06-05T14:00:00.000Z
Updated: 2024-08-05T16:48:22.728Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8839 |
not_vulnerable | 2026-06-08 05:10:08.979580 |
Details available
XSS via orig_url exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. The affected script is guest/preview.cgi.
Published: 2017-06-05T14:00:00.000Z
Updated: 2024-08-05T16:48:22.737Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8838 |
not_vulnerable | 2026-06-08 05:10:08.978980 |
Details available
XSS via syncid exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. The affected script is cgi-bin/HASync/hasync.cgi.
Published: 2017-06-05T14:00:00.000Z
Updated: 2024-08-05T16:48:22.692Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8837 |
not_vulnerable | 2026-06-08 05:10:08.978166 |
Details available
Cleartext password storage exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. The files in question are /etc/waipass and /etc/roapass. In case one of these devices is compromised, the attacker can gain access to passwords and abuse them to compromise further systems.
Published: 2017-06-05T14:00:00.000Z
Updated: 2024-08-05T16:48:22.755Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8836 |
not_vulnerable | 2026-06-08 05:10:08.977304 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8835 |
not_vulnerable | 2026-06-08 05:10:08.971996 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.