CVE-2018-14067

2020-12-3102:22:44

mitre

www.cve.org

9.6 High

AI Score

Confidence

High

0.05 Low

EPSS

Percentile

92.9%

JSON

Green Packet WiMax DV-360 2.10.14-g1.0.6.1 devices allow Command Injection, with unauthenticated remote command execution, via a crafted payload to the HTTPS port, because lighttpd listens on all network interfaces (including the external Internet) by default. NOTE: this may overlap CVE-2017-9980.

References

www.shellcode.it/article/greenpacket-wimax/