CVE-2023-49229: Peplink Balance Two Firmware

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue was discovered in Peplink Balance Two before 8.4.0. A missing authorization check in the administration web service allows read-only, unprivileged users to obtain sensitive information about the device configuration.

Affected products

• Peplink Balance Two Firmware: before 8.4.0 (fixed in 8.4.0)

Published 2023-12-28. Last modified 2026-06-17.