CVE-2020-24246

PoC —

CVSS 3.1

7.5 high

EPSS

1%p68

Published

Oct 7, 2020 (Oct 7, 2020)

Modified

Jun 17, 2026

Description

Peplink Balance before 8.1.0rc1 allows an unauthenticated attacker to download PHP configuration files (/filemanager/php/connector.php) from Web Admin.

Vendors: peplink
Products: balance 20x firmware, balance 310x firmware, mbx firmware, epx firmware, sdx firmware, balance 30 lte firmware, balance 20 firmware, balance 30 firmware, balance 30 pro firmware, balance 50 firmware, balance one firmware, balance two firmware
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.