Greenpacket Dx-350 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Greenpacket Dx-350 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2016-6552 — CVSS 9.8 (critical): Green Packet DX-350 uses non-random default credentials of: root:wimax. A remote network attacker can gain privileged access to a…
• CVE-2017-9932 — CVSS 9.8 (critical): Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb has a default password of admin for the admin account.
• CVE-2017-9980 — CVSS 9.8 (critical): In Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, the "PING" (aka tag_ipPing) feature within the web interface allows…
• CVE-2017-9930 — CVSS 8.8 (high): Cross-Site Request Forgery (CSRF) exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as demonstrated by a request to…
• CVE-2017-9931 — CVSS 6.1 (medium): Cross-Site Scripting (XSS) exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as demonstrated by the action parameter…