📦

dx-350

Vendor: greenpacket

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 1 Remote Access
Total CVEs 73 Total Indexed
Avg. EPSS 1.69% Exploit Prob.
Latest CVE CVE-2016-6552 Jul 13

Security Vulnerability Index

Page 1 / 8
9.8 CVSS
CVE-2016-6552

Green Packet DX-350 uses non-random default credentials of: root:wimax. A remote network attacker can gain privileged access to a vulnerable device.

EPSS: 2.84%
9.8 CVSS
CVE-2017-9980
RCE

In Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, the "PING" (aka tag_ipPing) feature within the web interface allows performing command injection, via the "pip" parameter.

EPSS: 2.96%
9.8 CVSS
CVE-2017-9932

Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb has a default password of admin for the admin account.

EPSS: 1.52%
6.1 CVSS
CVE-2017-9931

Cross-Site Scripting (XSS) exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as demonstrated by the action parameter to ajax.cgi.

EPSS: 0.65%
8.8 CVSS
CVE-2017-9930

Cross-Site Request Forgery (CSRF) exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as demonstrated by a request to ajax.cgi that enables UPnP.

EPSS: 0.48%