Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2797▼ 203 respecto a la semana anterior

Críticas / altas1352▲ 28 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)255▼ 266 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-49230	Modificada	Alta (8.8)	2.1%	—	Peplink Balance TWO Firmware	28/12/2023	17/6/2026	An issue was discovered in Peplink Balance Two before 8.4.0. A missing authorization check in captive portals allows attackers to modify the portals' configurations without prior authentication.
CVE-2023-49229	Modificada	Media (4.3)	0.49%	—	Peplink Balance TWO Firmware	28/12/2023	17/6/2026	An issue was discovered in Peplink Balance Two before 8.4.0. A missing authorization check in the administration web service allows read-only, unprivileged users to obtain sensitive information about the device configuration.
CVE-2023-49228	Modificada	Media (6.4)	0.47%	—	Peplink Balance TWO Firmware	28/12/2023	17/6/2026	An issue was discovered in Peplink Balance Two before 8.4.0. Console port authentication uses hard-coded credentials, which allows an attacker with physical access and sufficient knowledge to execute arbitrary commands as root.
CVE-2023-49226	Modificada	Alta (7.2)	3.4%	—	Peplink Balance TWO Firmware	25/12/2023	17/6/2026	An issue was discovered in Peplink Balance Two before 8.4.0. Command injection in the traceroute feature of the administration console allows users with admin privileges to execute arbitrary commands as root.
CVE-2020-24246	Modificada	Alta (7.5)	1.3%	—	Peplink Balance 20X Firmware Peplink Balance 310x Firmware Peplink MBX Firmware Peplink EPX Firmware+51	7/10/2020	17/6/2026	Peplink Balance before 8.1.0rc1 allows an unauthenticated attacker to download PHP configuration files (/filemanager/php/connector.php) from Web Admin.