Multiple Peplink Balance products are vulnerable to plaintext storage of passwords

Explicitly Stored Password Vulnerabilities The Balance 305 and others are multi-exit load balancing routers used in mid-sized businesses. Present in several Peplink Balance products using firmware versions prior to fw-b305hw2380hw6580hw2710hw31350hw22500-7.0.1-build2093, the vulnerability stems...

CVE-2017-8837

Cleartext password storage exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2380hw6580hw2710hw31350hw22500-7.0.1-build2093. The files in question are /etc/waipass and /etc/roapass. In case one of these devices is compromised, the attacker can gain...