CVE-2017-9932
CriticalSummary
Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb has a default password of 'admin' for the admin account.
Risk Assessment
The use of a default password poses a serious risk of unauthorized access to the device, potentially leading to system takeover.
Recommendation
It is recommended to immediately change the default password to a strong, unique password to secure the admin account.
Other vulnerabilities in Green Packet DX-350 Firmware
See all- CVE-2017-9930High
A Cross-Site Request Forgery (CSRF) vulnerability exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, allowing unauthorized requests such as enabling UPnP.
- CVE-2017-9980Critical
In Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, the 'PING' feature within the web interface allows performing command injection via the 'pip' parameter.
Original NVD description (English source)
Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb has a default password of admin for the admin account.