All packages
Green Packet DX-350 Firmware vulnerabilities
3 known CVE vulnerabilities in Green Packet DX-350 Firmware, translated and rated.
- CVE-2017-9930High
A Cross-Site Request Forgery (CSRF) vulnerability exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, allowing unauthorized requests such as enabling UPnP.
- CVE-2017-9980Critical
In Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, the 'PING' feature within the web interface allows performing command injection via the 'pip' parameter.
- CVE-2017-9932Critical
Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb has a default password of 'admin' for the admin account.