← back
CVE-2017-8838

CVE-2017-8838

EPSS 1.8%
XSS via syncid exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. The affected script is cgi-bin/HASync/hasync.cgi.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/42130/unverifiedexploitdbwww.exploit-db.com/exploits/42130unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://seclists.org/bugtraq/2017/Jun/1https://www.exploit-db.com/exploits/42130/https://www.x41-dsec.de/lab/advisories/x41-2017-005-peplink/