high7.2
CVE-2023-49226
An issue was discovered in Peplink Balance Two before 8.4.0.
Impact
An issue was discovered in Peplink Balance Two before 8.4.0. Command injection in the traceroute feature of the administration console allows users with admin privileges to execute arbitrary commands as root.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Peplink | Balance Two Firmware | before 8.4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.synacktiv.com/publications%253Ffield_tags_target_id%253D4
- https://www.synacktiv.com/sites/default/files/2023-12/synacktiv-peplink-multiple-vulnerabilities.pdf
- https://www.synacktiv.com/publications%253Ffield_tags_target_id%253D4
- https://www.synacktiv.com/sites/default/files/2023-12/synacktiv-peplink-multiple-vulnerabilities.pdf