https://blog.bssi.fr/cve-2020-24246-leaking-source-file-using-the-web-admin-interface-of-peplink-balance/

https://download.peplink.com/resources/firmware-8.1.0rc1-release-notes.pdf

NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NIST (AV:N/AC:L/Au:N/C:P/I:N/A:N)

NIST NVD-CWE-noinfo

AND
     OR
          *cpe:2.3:o:peplink:balance_1350_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:balance_1350:hw2:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:balance_20_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:balance_20:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:balance_20x_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:balance_20x:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:balance_210_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:balance_210:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:balance_210_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:balance_210:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:balance_2500_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:balance_2500:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:balance_305_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:balance_305:hw2:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:balance_30_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:balance_30:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:balance_30_lte_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:balance_30_lte:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:balance_30_pro_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:balance_30_pro:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:balance_310_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:balance_310:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:balance_310x_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:balance_310x:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:balance_380_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:balance_380:hw6:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:balance_50_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:balance_50:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:balance_50_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:balance_50:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:balance_580_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:balance_580:hw2-3:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:balance_710_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:balance_710:hw3:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:balance_one_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:balance_one:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:balance_two_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:balance_two:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:epx_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:epx:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:fusionhub_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:fusionhub:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:max_700_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:max_700:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:max_br1__ip67_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:max_br1__ip67:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:max_br1_classic_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:max_br1_classic:hw2-3:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:max_br1_ent_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:max_br1_ent:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:max_br1_ip55_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:max_br1_ip55:hw2-4:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:max_br1_m2m_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:max_br1_m2m:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:max_br1_mini_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:max_br1_mini:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:max_br1_mk2_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:max_br1_mk2:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:max_br1_pro_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:max_br1_pro:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:max_br1_slim_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:max_br1_slim:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:max_br2_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:max_br2:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:max_br2_ip55_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:max_br2_ip55:hw2-3:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:max_hd1_dome_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:max_hd1_dome:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:max_hd2_dome_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:max_hd2_dome:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:max_hd2_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:max_hd2:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:max_hd2_ip67_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:max_hd2_ip67:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:max_hd2_mini_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:max_hd2_mini:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:max_hd4_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:max_hd4:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:max_hd4_ip67_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:max_hd4_ip67:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:max_hotspot_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:max_hotspot:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:max_on-the-go_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:max_on-the-go:hw2:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:max_transit_duo_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:max_transit_duo:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:max_transit_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:max_transit:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:max_transit_mini_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:max_transit_mini:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:mbx_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:mbx:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:mediafast_200_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:mediafast_200:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:mediafast_500_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:mediafast_500:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:mediafast_750_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:mediafast_750:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:mediafast_hd2_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:mediafast_hd2:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:mediafast_hd4_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:mediafast_hd4:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:sdx_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:sdx:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:speedfusion_sfe_cam_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:speedfusion_sfe_cam:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:speedfusion_sfe_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:speedfusion_sfe:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:surf_soho_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:surf_soho:hw2:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:surf_soho_mk3_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:surf_soho_mk3:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:peplink:ubr_lte_firmware:*:*:*:*:*:*:*:* versions up to (including) 8.1.0
     OR
          cpe:2.3:h:peplink:ubr_lte:-:*:*:*:*:*:*:*

https://blog.bssi.fr/cve-2020-24246-leaking-source-file-using-the-web-admin-interface-of-peplink-balance/ No Types Assigned

https://blog.bssi.fr/cve-2020-24246-leaking-source-file-using-the-web-admin-interface-of-peplink-balance/ Exploit, Third Party Advisory

https://download.peplink.com/resources/firmware-8.1.0rc1-release-notes.pdf No Types Assigned

https://download.peplink.com/resources/firmware-8.1.0rc1-release-notes.pdf Release Notes, Vendor Advisory