CVE-2017-9980

Critical

Published: 21/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

In Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, the 'PING' feature within the web interface allows performing command injection via the 'pip' parameter.

Risk Assessment

An attacker could exploit this vulnerability to execute arbitrary commands on the device, potentially leading to system compromise.

Recommendation

It is recommended to update the firmware to the latest version to mitigate this vulnerability and to restrict access to the web interface.

Original NVD description (English source)

In Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, the "PING" (aka tag_ipPing) feature within the web interface allows performing command injection, via the "pip" parameter.