Peplink 380hw6 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Peplink 380hw6 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2017-8837 — CVSS 9.8 (critical): Cleartext password storage exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw…
• CVE-2017-8835 — CVSS 9.8 (critical): SQL injection exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350…
• CVE-2017-8836 — CVSS 8.8 (high): CSRF exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-…
• CVE-2017-8841 — CVSS 8.1 (high): Arbitrary file deletion exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_7…
• CVE-2017-8838 — CVSS 6.1 (medium): XSS via syncid exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_135…
• CVE-2017-8839 — CVSS 6.1 (medium): XSS via orig_url exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1…
• CVE-2017-8840 — CVSS 5.3 (medium): Debug information disclosure exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before…