Vendors / Green Packet Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 6
CVSS high 1
Exploited now Green Packet records in CISA KEV No Green Packet vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 47
In Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, the "PING" (aka tag_ipPing) feature within the web interface allows performing command injection, via the "pip" parameter.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02963 · Published 2017-07-21 · No fix listed CWE-77
Priority MEDIUM 47
Green Packet DX-350 uses non-random default credentials of: root:wimax.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02842 · Published 2018-07-13 · No fix listed CWE-255
Priority MEDIUM 45
Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb has a default password of admin for the admin account.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01516 · Published 2017-07-21 · No fix listed CWE-798
Priority LOW 39
Cross-Site Request Forgery (CSRF) exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as demonstrated by a request to ajax.cgi that enables UPnP.
CVSS 3.0 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00477 · Published 2017-07-21 · No fix listed CWE-352
Priority LOW 28
Cross-Site Scripting (XSS) exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as demonstrated by the action parameter to ajax.cgi.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00652 · Published 2017-07-21 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
6 1 1 0 0
THREATIST.IORead the docs