CrowdSecLive Exploit Tracker
Limited ExploitationCVE-2023-49230Public Exploit

Peplink - Missing Authorization (CVE-2023-49230)

PublishedDec 28, 2023
First SeenN/A
Last Seen
Reported
CVSS8.8
Peplink
PeplinkBalance Two
web_application

Description

An issue was discovered in Peplink Balance Two before 8.4.0. A missing authorization check in captive portals allows attackers to modify the portals' configurations without prior authentication.

psychologyCrowdSec Analysis

CVE-2023-49230 is a vulnerability in Peplink Balance Two devices prior to version 8.4.0, where a missing authorization check in captive portals allows attackers to modify portal configurations without authentication. This flaw could be exploited to alter network access controls or launch further attacks against users of the captive portal.

CrowdSec has been tracking this vulnerability and its exploits since 16th of July 2025.

CrowdSec has not observed any significant exploitation activity targeting CVE-2023-49230 across its network. As a result, no community-driven trend analysis is available for this vulnerability at this time.

Attackers exploit this vulnerability by sending unauthenticated POST requests to /guest/portal_admin_upload.cgi, allowing them to upload or modify captive portal configurations without authorization.

lock

Full Intelligence Available

Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.

EventDate
CVE Published2023-12-28
Rule Released2025-07-16

Related Weaknesses

CWE-862: Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

arrow_forward

Remediation & Protection

lock to download blocklists, subscribe to firewalls, and access IP intelligence.

External References