Background Recently, we have communicated with a security research lab that has informed us that they have found a vulnerability in Peplink firmware version 8.3.0. Details are below:
OS command injection (CVE-2023-49226)
- The reference link can be found here.
NOTE: The “CLI SSH & Console” option is disabled by default, so it is not exposed to the vulnerability with the default setting. Or, if the router is running firmware 8.3.0 and the option has been turned ON, you may turn it OFF to prevent possible unauthorized access.
Read the full announcement on the Peplink forum →
Where this lands in the library
Source: official Peplink announcement. Posted automatically by the Connectivity 101 news watcher; guides above are kept current by West Networks.
Leave a Reply