Description
迅博peplink安全网关 在8.4.0版本之前存在一个漏洞，由于缺少授权检查，未认证的攻击者可修改 captive portal配置。具体来说，攻击者可通过/guest/portal_admin_upload.cgi上传文件，所做更改会在/guest/preview.cgi?portal_id=1中体现。
迅博peplink安全网关8.4.0版本之前未认证配置上传(CVE-2023-49230)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-49230
https://www.synacktiv.com/sites/default/files/2023-12/synacktiv-peplink-multiple-vulnerabilities.pdf
https://medium.com/@srilakivarma/cve-2023-49230-how-i-found-an-unauthenticated-config-change-stored-xss-in-peplink-captive-e64c9aeef98c
https://github.com/projectdiscovery/nuclei-templates/issues/12195
https://s4e.io/tools/peplink-balance-two-before-840-unauthenticated-config-upload-cve-2023-49230
https://vulners.com/cve/CVE-2023-49230
https://forum.peplink.com/c/announcements/peplink-security-advisories/127
https://www.ddpoc.com/DVB-2025-9974.html