Peplink Security Advisory: Firmware 8.3.0 – Multiple Vulnerabilities (CVE-2023-49229, CVE-2023-49230)

Background Recently, we have communicated with a security research lab that has informed us that they have found several vulnerabilities in Peplink firmware version 8.3.0. Here are the details:

1. Lack of authorization on portals (CVE-2023-49229)
2. Secrets accessible to read-only users (CVE-2023-49230)

Products The vulnerabilities were identified in the Peplink Balance, MAX, MediaFast, Surf SOHO, and FusionHub product families in the firmware version 8.3.0.

Solution It has been fixed in the firmware version 8.4.0, which can be downloaded here.

Read the full announcement on the Peplink forum →

Where this lands in the library

• What's new in Firmware 8.6
• Peplink User Guide
• Security & Compliance

Source: official Peplink announcement. Posted automatically by the Connectivity 101 news watcher; guides above are kept current by West Networks.