CVE:CVE-2017-8838
CNNVD:CNNVD-201705-327
Peplink Balance 305等都是用于中型企业的多出口负载均衡路由器。
使用fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093之前版本固件的多款Peplink Balance产品中存在跨站脚本漏洞。远程攻击者可借助‘syncid’参数利用该漏洞注入任意的Web脚本或HTML。以下产品受到影响：Peplink Balance 305；380；580；710；1350；2500。
solution:Upgrade peplink b305hw2_firmware to a higher version than 7.0.1,and avoid the version 7.0.1; Upgrade peplink 380hw6_firmware to a higher version than 7.0.1,and avoid the version 7.0.1; Upgrade peplink 580hw2_firmware to a higher version than 7.0.1,and avoid the version 7.0.1; Upgrade peplink 710hw3_firmware to a higher version than 7.0.1,and avoid the version 7.0.1; Upgrade peplink 1350hw2_firmware to a higher version than 7.0.1,and avoid the version 7.0.1; Upgrade peplink 2500_firmware to a higher version than 7.0.1,and avoid the version 7.0.1