greenpacket records

8 published records for vendor greenpacket.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 3
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
41Plan	CVE-2018-14067No exploit	Green Packet WiMax DV-360 2.10.14-g1.0.6.1 devices allow Command Injection, with unauthenticated remote command execution, via a crafted paygreenpacket · dv-360 firmware · CWE-77 pre-auth RCE Command injection	Critical9.8	—	7.3%	Dec 30, 2020
41Plan	CVE-2017-3216No exploit	WiMAX routers based on the MediaTek SDK (libmtk) that use a custom httpd plugin are vulnerable to an authentication bypass allowing a remotegreenpacket · ox350 firmware · CWE-306 Pre-auth Auth bypass	Critical9.8	—	5.1%	Jun 19, 2017
40Plan	CVE-2017-9980No exploit	In Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, the "PING" (aka tag_ipPing) feature within the web interface allows performigreenpacket · dx-350 firmware · CWE-77 pre-auth RCE Command injection	Critical9.8	—	2.9%	Jul 21, 2017
40Plan	CVE-2016-6552No exploit	Green Packet DX-350 uses default credentialsgreenpacket · dx-350 firmware · CWE-255 Pre-auth Hard-coded credentials	Critical9.8	—	2.8%	Jul 13, 2018
40Plan	CVE-2023-26866Proof of concept	GreenPacket OH736's WR-1200 Indoor Unit, OT-235 with firmware versions M-IDU-1.6.0.3_V1.1 and MH-46360-2.0.3-R5-GP respectively are vulnerabgreenpacket · wr-1200 firmware · CWE-77 pre-auth RCE Command injection	Critical9.8	—	2.2%	Apr 4, 2023
39Monitor	CVE-2017-9932No exploit	Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb has a default password of admin for the admin account.greenpacket · dx-350 firmware · CWE-798 Pre-auth Hard-coded credentials	Critical9.8	—	1.5%	Jul 21, 2017
35Monitor	CVE-2017-9930No exploit	Cross-Site Request Forgery (CSRF) exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as demonstrated by a request to ajagreenpacket · dx-350 firmware · CWE-352 Pre-auth CSRF	High8.8	—	0.4%	Jul 21, 2017
24Monitor	CVE-2017-9931No exploit	Cross-Site Scripting (XSS) exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as demonstrated by the action parameter togreenpacket · dx-350 firmware · CWE-79 Pre-auth XSS	Medium6.1	—	0.6%	Jul 21, 2017

CVE-2018-14067
41Plan
Green Packet WiMax DV-360 2.10.14-g1.0.6.1 devices allow Command Injection, with unauthenticated remote command execution, via a crafted pay
CriticalCVSS 9.8No exploitEPSS 7%
- pre-auth RCE
- Command injection
greenpacket · dv-360 firmwareDec 30, 2020
CVE-2017-3216
41Plan
WiMAX routers based on the MediaTek SDK (libmtk) that use a custom httpd plugin are vulnerable to an authentication bypass allowing a remote
CriticalCVSS 9.8No exploitEPSS 5%
- Pre-auth
- Auth bypass
greenpacket · ox350 firmwareJun 19, 2017
CVE-2017-9980
40Plan
In Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, the "PING" (aka tag_ipPing) feature within the web interface allows performi
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
- Command injection
greenpacket · dx-350 firmwareJul 21, 2017
CVE-2016-6552
40Plan
Green Packet DX-350 uses default credentials
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- Hard-coded credentials
greenpacket · dx-350 firmwareJul 13, 2018
CVE-2023-26866
40Plan
GreenPacket OH736's WR-1200 Indoor Unit, OT-235 with firmware versions M-IDU-1.6.0.3_V1.1 and MH-46360-2.0.3-R5-GP respectively are vulnerab
CriticalCVSS 9.8Proof of conceptEPSS 2%
- pre-auth RCE
- Command injection
greenpacket · wr-1200 firmwareApr 4, 2023
CVE-2017-9932
39Monitor
Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb has a default password of admin for the admin account.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Hard-coded credentials
greenpacket · dx-350 firmwareJul 21, 2017
CVE-2017-9930
35Monitor
Cross-Site Request Forgery (CSRF) exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as demonstrated by a request to aja
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
greenpacket · dx-350 firmwareJul 21, 2017
CVE-2017-9931
24Monitor
Cross-Site Scripting (XSS) exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as demonstrated by the action parameter to
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
greenpacket · dx-350 firmwareJul 21, 2017