Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown

Green Packet DX-350 uses default credentials

Disclosure Date: July 13, 2018 (last updated November 27, 2024)
Green Packet DX-350 uses non-random default credentials of: root:wimax. A remote network attacker can gain privileged access to a vulnerable device.
0
0
Attacker Value
Unknown

CVE-2017-9932

Disclosure Date: July 21, 2017 (last updated November 26, 2024)
Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb has a default password of admin for the admin account.
0
0
Attacker Value
Unknown

CVE-2017-9930

Disclosure Date: July 21, 2017 (last updated November 26, 2024)
Cross-Site Request Forgery (CSRF) exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as demonstrated by a request to ajax.cgi that enables UPnP.
0
0
Attacker Value
Unknown

CVE-2017-9931

Disclosure Date: July 21, 2017 (last updated November 26, 2024)
Cross-Site Scripting (XSS) exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as demonstrated by the action parameter to ajax.cgi.
0
0
Attacker Value
Unknown

CVE-2017-9980

Disclosure Date: July 21, 2017 (last updated November 26, 2024)
In Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, the "PING" (aka tag_ipPing) feature within the web interface allows performing command injection, via the "pip" parameter.
0
0