CVE-2020-24246

Exploit

EPSS 1.28%
Veröffentlicht 07.10.2020 16:15:16
Zuletzt bearbeitet 21.11.2024 05:14:32
Erkennungen
Login

Peplink Balance before 8.1.0rc1 allows an unauthenticated attacker to download PHP configuration files (/filemanager/php/connector.php) from Web Admin.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 5

NVD 57 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Peplink ≫ Balance 20x Firmware Version <= 8.1.0

Peplink ≫ Balance 20x Version -

Peplink ≫ Balance 310x Firmware Version <= 8.1.0

Peplink ≫ Balance 310x Version -

Peplink ≫ Mbx Firmware Version <= 8.1.0

Peplink ≫ Mbx Version -

Peplink ≫ Epx Firmware Version <= 8.1.0

Peplink ≫ Epx Version -

Peplink ≫ Sdx Firmware Version <= 8.1.0

Peplink ≫ Sdx Version -

Peplink ≫ Balance 30 Lte Firmware Version <= 8.1.0

Peplink ≫ Balance 30 Lte Version -

Peplink ≫ Balance 20 Firmware Version <= 8.1.0

Peplink ≫ Balance 20 Version -

Peplink ≫ Balance 30 Firmware Version <= 8.1.0

Peplink ≫ Balance 30 Version -

Peplink ≫ Balance 30 Pro Firmware Version <= 8.1.0

Peplink ≫ Balance 30 Pro Version -

Peplink ≫ Balance 50 Firmware Version <= 8.1.0

Peplink ≫ Balance 50 Version -

Peplink ≫ Balance 50 Firmware Version <= 8.1.0

Peplink ≫ Balance 50 Version -

Peplink ≫ Balance One Firmware Version <= 8.1.0

Peplink ≫ Balance One Version -

Peplink ≫ Balance Two Firmware Version <= 8.1.0

Peplink ≫ Balance Two Version -

Peplink ≫ Balance 210 Firmware Version <= 8.1.0

Peplink ≫ Balance 210 Version -

Peplink ≫ Balance 210 Firmware Version <= 8.1.0

Peplink ≫ Balance 210 Version -

Peplink ≫ Balance 310 Firmware Version <= 8.1.0

Peplink ≫ Balance 310 Version -

Peplink ≫ Balance 305 Firmware Version <= 8.1.0

Peplink ≫ Balance 305 Version hw2

Peplink ≫ Balance 380 Firmware Version <= 8.1.0

Peplink ≫ Balance 380 Version hw6

Peplink ≫ Balance 580 Firmware Version <= 8.1.0

Peplink ≫ Balance 580 Version hw2-3

Peplink ≫ Balance 710 Firmware Version <= 8.1.0

Peplink ≫ Balance 710 Version hw3

Peplink ≫ Balance 1350 Firmware Version <= 8.1.0

Peplink ≫ Balance 1350 Version hw2

Peplink ≫ Balance 2500 Firmware Version <= 8.1.0

Peplink ≫ Balance 2500 Version -

Peplink ≫ Max Br1 Mk2 Firmware Version <= 8.1.0

Peplink ≫ Max Br1 Mk2 Version -

Peplink ≫ Max Br1 Classic Firmware Version <= 8.1.0

Peplink ≫ Max Br1 Classic Version hw2-3

Peplink ≫ Max Br1 Slim Firmware Version <= 8.1.0

Peplink ≫ Max Br1 Slim Version -

Peplink ≫ Max Br1 Mini Firmware Version <= 8.1.0

Peplink ≫ Max Br1 Mini Version -

Peplink ≫ Max Br1 M2m Firmware Version <= 8.1.0

Peplink ≫ Max Br1 M2m Version -

Peplink ≫ Max Br1 Ent Firmware Version <= 8.1.0

Peplink ≫ Max Br1 Ent Version -

Peplink ≫ Max Br1 Pro Firmware Version <= 8.1.0

Peplink ≫ Max Br1 Pro Version -

Peplink ≫ Max Br1 Ip67 Firmware Version <= 8.1.0

Peplink ≫ Max Br1 Ip67 Version -

Peplink ≫ Max Br2 Firmware Version <= 8.1.0

Peplink ≫ Max Br2 Version -

Peplink ≫ Max Br1 Ip55 Firmware Version <= 8.1.0

Peplink ≫ Max Br1 Ip55 Version hw2-4

Peplink ≫ Max Br2 Ip55 Firmware Version <= 8.1.0

Peplink ≫ Max Br2 Ip55 Version hw2-3

Peplink ≫ Max Hd2 Ip67 Firmware Version <= 8.1.0

Peplink ≫ Max Hd2 Ip67 Version -

Peplink ≫ Max Hd2 Mini Firmware Version <= 8.1.0

Peplink ≫ Max Hd2 Mini Version -

Peplink ≫ Max Hd2 Firmware Version <= 8.1.0

Peplink ≫ Max Hd2 Version -

Peplink ≫ Max Hd1 Dome Firmware Version <= 8.1.0

Peplink ≫ Max Hd1 Dome Version -

Peplink ≫ Max Hd2 Dome Firmware Version <= 8.1.0

Peplink ≫ Max Hd2 Dome Version -

Peplink ≫ Max Hd4 Firmware Version <= 8.1.0

Peplink ≫ Max Hd4 Version -

Peplink ≫ Max Hd4 Ip67 Firmware Version <= 8.1.0

Peplink ≫ Max Hd4 Ip67 Version -

Peplink ≫ Max Transit Firmware Version <= 8.1.0

Peplink ≫ Max Transit Version -

Peplink ≫ Max Transit Duo Firmware Version <= 8.1.0

Peplink ≫ Max Transit Duo Version -

Peplink ≫ Max Transit Mini Firmware Version <= 8.1.0

Peplink ≫ Max Transit Mini Version -

Peplink ≫ Max Hotspot Firmware Version <= 8.1.0

Peplink ≫ Max Hotspot Version -

Peplink ≫ Max On-the-go Firmware Version <= 8.1.0

Peplink ≫ Max On-the-go Version hw2

Peplink ≫ Max 700 Firmware Version <= 8.1.0

Peplink ≫ Max 700 Version -

Peplink ≫ Ubr Lte Firmware Version <= 8.1.0

Peplink ≫ Ubr Lte Version -

Peplink ≫ Surf Soho Firmware Version <= 8.1.0

Peplink ≫ Surf Soho Version hw2

Peplink ≫ Surf Soho Mk3 Firmware Version <= 8.1.0

Peplink ≫ Surf Soho Mk3 Version -

Peplink ≫ Mediafast 200 Firmware Version <= 8.1.0

Peplink ≫ Mediafast 200 Version -

Peplink ≫ Mediafast 500 Firmware Version <= 8.1.0

Peplink ≫ Mediafast 500 Version -

Peplink ≫ Mediafast 750 Firmware Version <= 8.1.0

Peplink ≫ Mediafast 750 Version -

Peplink ≫ Mediafast Hd2 Firmware Version <= 8.1.0

Peplink ≫ Mediafast Hd2 Version -

Peplink ≫ Mediafast Hd4 Firmware Version <= 8.1.0

Peplink ≫ Mediafast Hd4 Version -

Peplink ≫ Speedfusion Sfe Firmware Version <= 8.1.0

Peplink ≫ Speedfusion Sfe Version -

Peplink ≫ Speedfusion Sfe Cam Firmware Version <= 8.1.0

Peplink ≫ Speedfusion Sfe Cam Version -

Peplink ≫ Fusionhub Firmware Version <= 8.1.0

Peplink ≫ Fusionhub Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.28%	0.665

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NIST	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

https://blog.bssi.fr/cve-2020-24246-leaking-source-file-using-the-web-admin-interface-of-peplink-balance/

Third Party Advisory

Exploit

https://download.peplink.com/resources/firmware-8.1.0rc1-release-notes.pdf

Vendor Advisory

Release Notes

https://nvd.nist.gov/vuln/detail/CVE-2020-24246

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-24246

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-24246

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2020-24246