Known Vulnerabilities for Balance 580 by Peplink
Listed below are 8 of the newest known vulnerabilities associated with "Balance 580" by "Peplink".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
More device details and information can be found at device.report here: Peplink Balance 580
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-34368 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `transferBalance()` method in `plugin... | Not Provided | 2026-03-27 | 2026-03-30 |
| CVE-2020-24246 | Peplink Balance before 8.1.0rc1 allows an unauthenticated attacker to download PHP configuration files (/filemanager/php/conn... | 7.5 - HIGH | 2020-10-07 | 2020-10-23 |
| CVE-2017-8841 | Arbitrary file deletion exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_... | 8.1 - HIGH | 2017-06-05 | 2017-08-13 |
| CVE-2017-8840 | Debug information disclosure exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b30... | 5.3 - MEDIUM | 2017-06-05 | 2017-08-13 |
| CVE-2017-8839 | XSS via orig_url exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_... | 6.1 - MEDIUM | 2017-06-05 | 2017-08-13 |
| CVE-2017-8838 | XSS via syncid exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_58... | 6.1 - MEDIUM | 2017-06-05 | 2017-08-13 |
| CVE-2017-8837 | Cleartext password storage exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305h... | 9.8 - CRITICAL | 2017-06-05 | 2019-10-03 |
| CVE-2017-8836 | CSRF exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw... | 8.8 - HIGH | 2017-06-05 | 2017-08-13 |
| CVE-2017-8835 | SQL injection exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580... | 9.8 - CRITICAL | 2017-06-05 | 2017-08-13 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Peplink | Balance 580 | hw2-3 | All | All | All |