PT-2023-31124 · Peplink · Peplink Balance Two

CVE-2023-49230 · Publicado 2023-12-07 · Atualizado 2025-07-12

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Peplink Balance Two versions prior to 8.4.0

Description A missing authorization check in captive portals allows attackers to modify the portals' configurations without prior authentication. This issue affects Peplink Balance Two and can be exploited by attackers to alter portal settings.

Recommendations For versions prior to 8.4.0, update to version 8.4.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the captive portal configuration to minimize the risk of exploitation.

Exploit

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2023-49230

Produtos afetados

Peplink Balance Two

Referências · 9

• 🔥 https://synacktiv.com/sites/default/files/2023-12/synacktiv-peplink-multiple-vulnerabilities.pdf · Exploit
• https://twitter.com/CVEnew/status/1740212887082488084 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2023-49230 · Aviso do Fabricante
• https://twitter.com/pdnuclei_bot/status/1943973627126518199 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/1740262460156690744 · Publicação no Twitter
• https://t.me/cvenotify/65342 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-49230 · Nota de Segurança
• https://synacktiv.com/publications%253Ffield_tags_target_id%253D4 · Nota
• https://twitter.com/Synacktiv/status/1732817027901821084 · Publicação no Twitter