Peplink vulnerabilities
We track 12 vulnerabilities in Peplink products across 6 products. 12 are rated high or critical, and none are known to be exploited. The most recent was published on April 17, 2024.
Latest Peplink vulnerabilities
- 8.8 High severity
Smart Reader: Improper Access Control
A data integrity vulnerability exists in the web interface /cgi-bin/upload_config.cgi functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted HTTP request can lead to configuration modification. An attacker can make an unauthenticated HTTP
- 7.5 High severity
Smart Reader: Improper Access Control
An information disclosure vulnerability exists in the web interface /cgi-bin/download_config.cgi functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an
- 7.5 High severity
Smart Reader: Improper Access Control
An information disclosure vulnerability exists in the web interface /cgi-bin/debug_dump.cgi functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unau
- 9.8 Critical severity
Smart Reader: Use of Hard-coded Credentials
A privilege escalation vulnerability exists in the /bin/login functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted command line argument can lead to a limited-shell escape and elevated capabilities. An attacker can authenticate with hard
- 7.2 High severity
Smart Reader: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability exists in the web interface mac2name functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to t
- 8.8 High severity
Balance Two Firmware: Missing Authorization
An issue was discovered in Peplink Balance Two before 8.4.0. A missing authorization check in captive portals allows attackers to modify the portals' configurations without prior authentication.
- 7.2 High severity
Balance Two Firmware: Improper Neutralization of Special Elements used in a Command
An issue was discovered in Peplink Balance Two before 8.4.0. Command injection in the traceroute feature of the administration console allows users with admin privileges to execute arbitrary commands as root.
- 8.8 High severity
Surf SOHO HW1: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability exists in the api.cgi cmd.mvpn.x509.write functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). A specially crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to trigg
- 8.8 High severity
Surf SOHO HW1: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability exists in the api.cgi cmd.mvpn.x509.write functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). A specially crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to trigg
- 8.8 High severity
Surf SOHO HW1: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability exists in the data.cgi xfer_dns functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). A specially crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to trigger this vu
- 8.8 High severity
Surf SOHO HW1: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability exists in the admin.cgi MVPN_trial_init functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). A specially crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to trigger
- 8.8 High severity
Surf SOHO HW1: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability exists in the admin.cgi USSD_send functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). A specially crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to trigger this