CVE-2017-8837: Insufficiently Protected Credentials

Cleartext password storage exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2380hw6580hw2710hw31350hw22500-7.0.1-build2093. The files in question are /etc/waipass and /etc/roapass. In case one of these devices is compromised, the attacker can gain...

PT-2017-18567

Name of the Vulnerable Software and Affected Versions Peplink Balance devices versions prior to 7.0.1-build2093 Description The issue concerns cleartext password storage. Specifically, the files /etc/waipass and /etc/roapass store passwords in cleartext. If a device is compromised, an attacker ca...