Peplink Balance 2500
Approved changes feed: RSS · Atom
cpe:2.3:h:peplink:balance_2500:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Peplink (7fd66203-db7b-5fc4-b96c-b7b360912c0b) |
|---|---|
| Product | Balance 2500 (935d6b7b-6472-58fb-b004-f579c486015d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-24246 |
not_vulnerable | 2026-06-08 05:22:32.689667 |
Details available
Peplink Balance before 8.1.0rc1 allows an unauthenticated attacker to download PHP configuration files (/filemanager/php/connector.php) from Web Admin.
Published: 2020-10-07T15:10:19.000Z
Updated: 2024-08-04T15:12:08.683Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8841 |
not_vulnerable | 2026-06-08 05:10:08.981255 |
Details available
Arbitrary file deletion exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. The attack methodology is absolute path traversal in cgi-bin/MANGA/firmware_process.cgi via the upfile.path parameter.
Published: 2017-06-05T14:00:00.000Z
Updated: 2024-08-05T16:48:22.693Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8840 |
not_vulnerable | 2026-06-08 05:10:08.980645 |
Details available
Debug information disclosure exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. A direct request to cgi-bin/HASync/hasync.cgi?debug=1 shows Master LAN Address, Serial Number, HA Group ID, Virtual IP, and Submitted syncid.
Published: 2017-06-05T14:00:00.000Z
Updated: 2024-08-05T16:48:22.728Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8839 |
not_vulnerable | 2026-06-08 05:10:08.979826 |
Details available
XSS via orig_url exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. The affected script is guest/preview.cgi.
Published: 2017-06-05T14:00:00.000Z
Updated: 2024-08-05T16:48:22.737Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8838 |
not_vulnerable | 2026-06-08 05:10:08.979113 |
Details available
XSS via syncid exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. The affected script is cgi-bin/HASync/hasync.cgi.
Published: 2017-06-05T14:00:00.000Z
Updated: 2024-08-05T16:48:22.692Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8837 |
not_vulnerable | 2026-06-08 05:10:08.978392 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8836 |
not_vulnerable | 2026-06-08 05:10:08.977567 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8835 |
not_vulnerable | 2026-06-08 05:10:08.976243 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.