CVE-2020-24246

Exploit

EPSS 0.52%
Veröffentlicht 07.10.2020 16:15:16
Zuletzt bearbeitet 21.11.2024 05:14:32
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Peplink Balance before 8.1.0rc1 allows an unauthenticated attacker to download PHP configuration files (/filemanager/php/connector.php) from Web Admin.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Peplink ≫ Balance 20x Firmware Version <= 8.1.0

Peplink ≫ Balance 20x Version-

Peplink ≫ Balance 310x Firmware Version <= 8.1.0

Peplink ≫ Balance 310x Version-

Peplink ≫ Mbx Firmware Version <= 8.1.0

Peplink ≫ Mbx Version-

Peplink ≫ Epx Firmware Version <= 8.1.0

Peplink ≫ Epx Version-

Peplink ≫ Sdx Firmware Version <= 8.1.0

Peplink ≫ Sdx Version-

Peplink ≫ Balance 30 Lte Firmware Version <= 8.1.0

Peplink ≫ Balance 30 Lte Version-

Peplink ≫ Balance 20 Firmware Version <= 8.1.0

Peplink ≫ Balance 20 Version-

Peplink ≫ Balance 30 Firmware Version <= 8.1.0

Peplink ≫ Balance 30 Version-

Peplink ≫ Balance 30 Pro Firmware Version <= 8.1.0

Peplink ≫ Balance 30 Pro Version-

Peplink ≫ Balance 50 Firmware Version <= 8.1.0

Peplink ≫ Balance 50 Version-

Peplink ≫ Balance 50 Firmware Version <= 8.1.0

Peplink ≫ Balance 50 Version-

Peplink ≫ Balance One Firmware Version <= 8.1.0

Peplink ≫ Balance One Version-

Peplink ≫ Balance Two Firmware Version <= 8.1.0

Peplink ≫ Balance Two Version-

Peplink ≫ Balance 210 Firmware Version <= 8.1.0

Peplink ≫ Balance 210 Version-

Peplink ≫ Balance 210 Firmware Version <= 8.1.0

Peplink ≫ Balance 210 Version-

Peplink ≫ Balance 310 Firmware Version <= 8.1.0

Peplink ≫ Balance 310 Version-

Peplink ≫ Balance 305 Firmware Version <= 8.1.0

Peplink ≫ Balance 305 Versionhw2

Peplink ≫ Balance 380 Firmware Version <= 8.1.0

Peplink ≫ Balance 380 Versionhw6

Peplink ≫ Balance 580 Firmware Version <= 8.1.0

Peplink ≫ Balance 580 Versionhw2-3

Peplink ≫ Balance 710 Firmware Version <= 8.1.0

Peplink ≫ Balance 710 Versionhw3

Peplink ≫ Balance 1350 Firmware Version <= 8.1.0

Peplink ≫ Balance 1350 Versionhw2

Peplink ≫ Balance 2500 Firmware Version <= 8.1.0

Peplink ≫ Balance 2500 Version-

Peplink ≫ Max Br1 Mk2 Firmware Version <= 8.1.0

Peplink ≫ Max Br1 Mk2 Version-

Peplink ≫ Max Br1 Classic Firmware Version <= 8.1.0

Peplink ≫ Max Br1 Classic Versionhw2-3

Peplink ≫ Max Br1 Slim Firmware Version <= 8.1.0

Peplink ≫ Max Br1 Slim Version-

Peplink ≫ Max Br1 Mini Firmware Version <= 8.1.0

Peplink ≫ Max Br1 Mini Version-

Peplink ≫ Max Br1 M2m Firmware Version <= 8.1.0

Peplink ≫ Max Br1 M2m Version-

Peplink ≫ Max Br1 Ent Firmware Version <= 8.1.0

Peplink ≫ Max Br1 Ent Version-

Peplink ≫ Max Br1 Pro Firmware Version <= 8.1.0

Peplink ≫ Max Br1 Pro Version-

Peplink ≫ Max Br1 Ip67 Firmware Version <= 8.1.0

Peplink ≫ Max Br1 Ip67 Version-

Peplink ≫ Max Br2 Firmware Version <= 8.1.0

Peplink ≫ Max Br2 Version-

Peplink ≫ Max Br1 Ip55 Firmware Version <= 8.1.0

Peplink ≫ Max Br1 Ip55 Versionhw2-4

Peplink ≫ Max Br2 Ip55 Firmware Version <= 8.1.0

Peplink ≫ Max Br2 Ip55 Versionhw2-3

Peplink ≫ Max Hd2 Ip67 Firmware Version <= 8.1.0

Peplink ≫ Max Hd2 Ip67 Version-

Peplink ≫ Max Hd2 Mini Firmware Version <= 8.1.0

Peplink ≫ Max Hd2 Mini Version-

Peplink ≫ Max Hd2 Firmware Version <= 8.1.0

Peplink ≫ Max Hd2 Version-

Peplink ≫ Max Hd1 Dome Firmware Version <= 8.1.0

Peplink ≫ Max Hd1 Dome Version-

Peplink ≫ Max Hd2 Dome Firmware Version <= 8.1.0

Peplink ≫ Max Hd2 Dome Version-

Peplink ≫ Max Hd4 Firmware Version <= 8.1.0

Peplink ≫ Max Hd4 Version-

Peplink ≫ Max Hd4 Ip67 Firmware Version <= 8.1.0

Peplink ≫ Max Hd4 Ip67 Version-

Peplink ≫ Max Transit Firmware Version <= 8.1.0

Peplink ≫ Max Transit Version-

Peplink ≫ Max Transit Duo Firmware Version <= 8.1.0

Peplink ≫ Max Transit Duo Version-

Peplink ≫ Max Transit Mini Firmware Version <= 8.1.0

Peplink ≫ Max Transit Mini Version-

Peplink ≫ Max Hotspot Firmware Version <= 8.1.0

Peplink ≫ Max Hotspot Version-

Peplink ≫ Max On-the-go Firmware Version <= 8.1.0

Peplink ≫ Max On-the-go Versionhw2

Peplink ≫ Max 700 Firmware Version <= 8.1.0

Peplink ≫ Max 700 Version-

Peplink ≫ Ubr Lte Firmware Version <= 8.1.0

Peplink ≫ Ubr Lte Version-

Peplink ≫ Surf Soho Firmware Version <= 8.1.0

Peplink ≫ Surf Soho Versionhw2

Peplink ≫ Surf Soho Mk3 Firmware Version <= 8.1.0

Peplink ≫ Surf Soho Mk3 Version-

Peplink ≫ Mediafast 200 Firmware Version <= 8.1.0

Peplink ≫ Mediafast 200 Version-

Peplink ≫ Mediafast 500 Firmware Version <= 8.1.0

Peplink ≫ Mediafast 500 Version-

Peplink ≫ Mediafast 750 Firmware Version <= 8.1.0

Peplink ≫ Mediafast 750 Version-

Peplink ≫ Mediafast Hd2 Firmware Version <= 8.1.0

Peplink ≫ Mediafast Hd2 Version-

Peplink ≫ Mediafast Hd4 Firmware Version <= 8.1.0

Peplink ≫ Mediafast Hd4 Version-

Peplink ≫ Speedfusion Sfe Firmware Version <= 8.1.0

Peplink ≫ Speedfusion Sfe Version-

Peplink ≫ Speedfusion Sfe Cam Firmware Version <= 8.1.0

Peplink ≫ Speedfusion Sfe Cam Version-

Peplink ≫ Fusionhub Firmware Version <= 8.1.0

Peplink ≫ Fusionhub Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.52%	0.64

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

https://blog.bssi.fr/cve-2020-24246-leaking-source-file-using-the-web-admin-interface-of-peplink-balance/

Third Party Advisory

Exploit

https://download.peplink.com/resources/firmware-8.1.0rc1-release-notes.pdf

Vendor Advisory

Release Notes

https://nvd.nist.gov/vuln/detail/CVE-2020-24246

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-24246

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-24246

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2020-24246