Balance Router with EC Feature Affected by PHP2Shell Vulnerability

With regards to this advisory, are routers on firmware older than 8.6.1 GA affected by the EC feature issue? We have a couple of Balance 710 running 8.5.0 and 8.6.0, all capable of (although not enabled) EC.

@Khang_Tran if the EC feature is disabled (the default setting), the router is not vulnerable.

2 Likes

Just to follow up on this question, could you please confirm that routers on the older firmware (8.5.0 & 8.6.0) with EC enabled are also affected? The advisory wasn’t clear if it just impacted EC-enabled on 8.6.1, or if it was present on the previous versions as well. Thanks.

1 Like