CVE-2017-8837: Cleartext password storage exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmwa...

Security readout for executives and security teams

Affected Peplink Balance appliances stored certain passwords in cleartext. If an attacker first compromises one of these devices, those passwords can be read and reused to attack other systems. This is mainly a credential exposure and follow-on compromise risk. Exposure is limited to the listed Peplink Balance models running firmware before the named 7.0.1 build. Organizations should verify appliance models, firmware versions, and whether stored passwords could access other network, VPN, or administrative systems. Treat this as a credential containment issue. It is not confirmed as actively exploited, but exposed network appliances can become a bridge into other systems if stored passwords are reused. Mitigation focus: Upgrade affected devices to firmware 7.0.1-build2093 or later if available.; Check Peplink guidance for model-specific fixed firmware and support status.; Rotate any passwords that may have been stored on affected appliances..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.