Balance Two Firmware vulnerabilities

2 known vulnerabilities in Balance Two Firmware from Peplink. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Balance Two Firmware: Missing Authorization

  CVE-2023-49230Dec 28, 2023PeplinkEPSS 2.05%

  An issue was discovered in Peplink Balance Two before 8.4.0. A missing authorization check in captive portals allows attackers to modify the portals' configurations without prior authentication.

• 7.2 High severity

  Balance Two Firmware: Improper Neutralization of Special Elements used in a Command

  CVE-2023-49226Dec 25, 2023PeplinkEPSS 3.42%

  An issue was discovered in Peplink Balance Two before 8.4.0. Command injection in the traceroute feature of the administration console allows users with admin privileges to execute arbitrary commands as root.