TI-2016-05616 CVE-2016-6552 · GHSA-6xxx-rh9w-rhw2
Green Packet DX-350 uses default credentials
Priority MEDIUM 47
Green Packet DX-350 uses non-random default credentials of: root:wimax.
Vulnerabilities
5 records
TI-2017-07339 CVE-2017-9980 · GHSA-7rpp-qvvp-3f22
In Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, the "PING" (aka…
Priority MEDIUM 47
In Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, the "PING" (aka tag_ipPing) feature within the web interface allows performing command injection, via the "pip" parameter.
TI-2017-07300 CVE-2017-9932 · GHSA-j39f-xq2j-78rc
Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb has a default password of admin for the admin account.
Priority MEDIUM 45
Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb has a default password of admin for the admin account.
TI-2017-07299 CVE-2017-9931 · GHSA-8m8p-545c-2rwc
Cross-Site Scripting (XSS) exists in Green Packet DX-350 Firmware version…
Priority LOW 28
Cross-Site Scripting (XSS) exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as demonstrated by the action parameter to ajax.cgi.
TI-2017-07298 CVE-2017-9930 · GHSA-cvhq-p97v-j237
Cross-Site Request Forgery (CSRF) exists in Green Packet DX-350 Firmware version…
Priority LOW 39
Cross-Site Request Forgery (CSRF) exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as demonstrated by a request to ajax.cgi that enables UPnP.