peter bassill · operator
$ cve CVE-2017-8835 JSON

CVE-2017-8835 EXPLOIT

9.8
CRITICAL · CVSS 3.0 · EPSS 61.6% (pctl 99)

Patch early

A public exploit exists.

Description

SQL injection exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. An attack vector is the bauth cookie to cgi-bin/MANGA/admin.cgi. One impact is enumeration of user accounts by observing whether a session ID can be retrieved from the sessions database.

Scoring

CVSS9.8 (CRITICAL, v3.0)
VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS61.58% — more likely to be exploited than 99% of all CVEs
WeaknessCWE-89
On CISA KEVno
Public exploityes
Published2017-06-05
Last modified2026-06-17

Affected (12)

VendorProduct
peplink1350hw2 firmware
peplink2500 firmware
peplink380hw6 firmware
peplink580hw2 firmware
peplink710hw3 firmware
peplinkb305hw2 firmware
peplinkbalance 1350
peplinkbalance 2500
peplinkbalance 305
peplinkbalance 380
peplinkbalance 580
peplinkbalance 710

Public exploits

References

→ the Explorer  ·  watch your stack  ·  NVD