greenpacket kayıtları
greenpacket üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')3
- CWE-255 Credentials Management Errors1
- CWE-306 Missing Authentication for Critical Function1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-798 Use of Hard-coded Credentials1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2018-14067İstismar yok | Green Packet WiMax DV-360 2.10.14-g1.0.6.1 devices allow Command Injection, with unauthenticated remote command execution, via a crafted paygreenpacket · dv-360 firmware · CWE-77 | Kritik9,8 | — | %7,3 | 30 Ara 2020 |
41Planlayın | CVE-2017-3216İstismar yok | WiMAX routers based on the MediaTek SDK (libmtk) that use a custom httpd plugin are vulnerable to an authentication bypass allowing a remotegreenpacket · ox350 firmware · CWE-306 | Kritik9,8 | — | %5,2 | 19 Haz 2017 |
40Planlayın | CVE-2017-9980İstismar yok | In Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, the "PING" (aka tag_ipPing) feature within the web interface allows performigreenpacket · dx-350 firmware · CWE-77 | Kritik9,8 | — | %3,0 | 21 Tem 2017 |
40Planlayın | CVE-2016-6552İstismar yok | Green Packet DX-350 uses default credentialsgreenpacket · dx-350 firmware · CWE-255 | Kritik9,8 | — | %2,8 | 13 Tem 2018 |
40Planlayın | CVE-2023-26866Kavram kanıtı | GreenPacket OH736's WR-1200 Indoor Unit, OT-235 with firmware versions M-IDU-1.6.0.3_V1.1 and MH-46360-2.0.3-R5-GP respectively are vulnerabgreenpacket · wr-1200 firmware · CWE-77 | Kritik9,8 | — | %2,3 | 4 Nis 2023 |
39İzleyin | CVE-2017-9932İstismar yok | Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb has a default password of admin for the admin account.greenpacket · dx-350 firmware · CWE-798 | Kritik9,8 | — | %1,5 | 21 Tem 2017 |
35İzleyin | CVE-2017-9930İstismar yok | Cross-Site Request Forgery (CSRF) exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as demonstrated by a request to ajagreenpacket · dx-350 firmware · CWE-352 | Yüksek8,8 | — | %0,5 | 21 Tem 2017 |
24İzleyin | CVE-2017-9931İstismar yok | Cross-Site Scripting (XSS) exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as demonstrated by the action parameter togreenpacket · dx-350 firmware · CWE-79 | Orta6,1 | — | %0,7 | 21 Tem 2017 |
- CVE-2018-1406741Planlayın
Green Packet WiMax DV-360 2.10.14-g1.0.6.1 devices allow Command Injection, with unauthenticated remote command execution, via a crafted pay
KritikCVSS 9,8İstismar yokEPSS %7greenpacket · dv-360 firmware30 Ara 2020
- CVE-2017-321641Planlayın
WiMAX routers based on the MediaTek SDK (libmtk) that use a custom httpd plugin are vulnerable to an authentication bypass allowing a remote
KritikCVSS 9,8İstismar yokEPSS %5greenpacket · ox350 firmware19 Haz 2017
- CVE-2017-998040Planlayın
In Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, the "PING" (aka tag_ipPing) feature within the web interface allows performi
KritikCVSS 9,8İstismar yokEPSS %3greenpacket · dx-350 firmware21 Tem 2017
- CVE-2016-655240Planlayın
Green Packet DX-350 uses default credentials
KritikCVSS 9,8İstismar yokEPSS %3greenpacket · dx-350 firmware13 Tem 2018
- CVE-2023-2686640Planlayın
GreenPacket OH736's WR-1200 Indoor Unit, OT-235 with firmware versions M-IDU-1.6.0.3_V1.1 and MH-46360-2.0.3-R5-GP respectively are vulnerab
KritikCVSS 9,8Kavram kanıtıEPSS %2greenpacket · wr-1200 firmware4 Nis 2023
- CVE-2017-993239İzleyin
Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb has a default password of admin for the admin account.
KritikCVSS 9,8İstismar yokEPSS %2greenpacket · dx-350 firmware21 Tem 2017
- CVE-2017-993035İzleyin
Cross-Site Request Forgery (CSRF) exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as demonstrated by a request to aja
YüksekCVSS 8,8İstismar yokEPSS %0greenpacket · dx-350 firmware21 Tem 2017
- CVE-2017-993124İzleyin
Cross-Site Scripting (XSS) exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as demonstrated by the action parameter to
OrtaCVSS 6,1İstismar yokEPSS %1greenpacket · dx-350 firmware21 Tem 2017