Vulnerability record · CVE-2017-8837 · published 5 June 2017
CVE-2017-8837: Peplink b305hw2 firmware insufficiently protected credentials vulnerability
Peplink · B305hw2 Firmware
Cleartext password storage exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. The files in question are /etc/waipass and /etc/roapass. In case one of these devices is compromised, the attacker can gain access to passwords and abuse them to compromise further systems.
Description
Cleartext password storage exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. The files in question are /etc/waipass and /etc/roapass. In case one of these devices is compromised, the attacker can gain access to passwords and abuse them to compromise further systems.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
6 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| http://seclists.org/bugtraq/2017/Jun/1 | Mailing ListThird Party Advisory |
| https://www.exploit-db.com/exploits/42130/ | |
| https://www.x41-dsec.de/lab/advisories/x41-2017-005-peplink/ | PatchThird Party Advisory |
| http://seclists.org/bugtraq/2017/Jun/1 | Mailing ListThird Party Advisory |
| https://www.exploit-db.com/exploits/42130/ | |
| https://www.x41-dsec.de/lab/advisories/x41-2017-005-peplink/ | PatchThird Party Advisory |
Track CVE-2017-8837 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
Source: NIST National Vulnerability Database (record CVE-2017-8837), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.
