Security Flaw in Peplink Balance Two Administration Web Service
CVE-2023-49229

4.3MEDIUM

Key Information:

Vendor

Peplink

Status
Peplink Balance Two
Vendor
CVE Published:
28 December 2023

What is CVE-2023-49229?

A vulnerability in the Peplink Balance Two before version 8.4.0 allows unprivileged users to bypass authorization checks in the administration web service, potentially exposing sensitive device configuration data. This flaw could be exploited to gain unauthorized access to critical information, making it essential for organizations to update their systems to secure versions.

References

https://www.synacktiv.com/publications%253Ffield_tags_tar...
https://www.synacktiv.com/sites/default/files/2023-12/syn...

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.