CVE-2017-8836

Name of the Vulnerable Software and Affected Versions Peplink Balance devices versions prior to 7.0.1-build2093

Description The issue affects the CGI scripts in the administrative interface, allowing an attacker to execute commands if a logged-in user visits a malicious website. This can be used to change the credentials of the administrative web interface.

Recommendations For Peplink Balance devices with firmware before 7.0.1-build2093, update to firmware version 7.0.1-build2093 or later to resolve the issue.