Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
greenpacket dx-350 firmware 2.8.9.5-g1.4.8-atheeb vulnerabilities and exploits
(subscribe to this query)
8.8
CVSSv3
CVE-2017-9930
Cross-Site Request Forgery (CSRF) exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as demonstrated by a request to ajax.cgi that enables UPnP.
Greenpacket Dx-350 Firmware 2.8.9.5-g1.4.8-atheeb
9.8
CVSSv3
CVE-2017-9980
In Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, the "PING" (aka tag_ipPing) feature within the web interface allows performing command injection, via the "pip" parameter.
Greenpacket Dx-350 Firmware 2.8.9.5-g1.4.8-atheeb
6.1
CVSSv3
CVE-2017-9931
Cross-Site Scripting (XSS) exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as demonstrated by the action parameter to ajax.cgi.
Greenpacket Dx-350 Firmware 2.8.9.5-g1.4.8-atheeb
9.8
CVSSv3
CVE-2017-9932
Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb has a default password of admin for the admin account.
Greenpacket Dx-350 Firmware 2.8.9.5-g1.4.8-atheeb
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-37316
firmware
CVE-2024-30078
CVE-2024-5995
remote code execution
logic flaw
CVE-2024-20693
CVE-2024-37315
CVE-2024-5464
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started