EUVD-2013-4581

Malware in sbrugna...

Green Packet DX-350 Injection Command Vulnerability

The Green Packet DX-350 is a network access point device from Green Packet USA. A security vulnerability exists in the PING function of the web interface in the Green Packet DX-350. The vulnerability can be exploited by an attacker to inject commands with the help of the 'pip' parameter...

CVE-2017-9980

In Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, the "PING" aka tagipPing feature within the web interface allows performing command injection, via the "pip" parameter...

CVE-2017-9980

In Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, the "PING" aka tagipPing feature within the web interface allows performing command injection, via the "pip" parameter...

PT-2017-19318

Name of the Vulnerable Software and Affected Versions Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb Description The issue concerns command injection via the pip parameter in the PING feature, also known as tag ipPing, within the web interface. Recommendations For Green Packet DX-350...

CVE-2017-9980: Improper Neutralization of Special Elements used in a Command

In Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, the "PING" aka tagipPing feature within the web interface allows performing command injection, via the "pip" parameter...

PT-2013-5164

Name of the Vulnerable Software and Affected Versions Choice Wireless Green Packet WIXFMR-111 4G WiMax modem affected versions not specified Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the pip parameter in an "Ajax tag ipPing" request...

CVE-2013-4731: Improper Authentication

ajax.cgi in the web interface on the Choice Wireless Green Packet WIXFMR-111 4G WiMax modem allows remote attackers to execute arbitrary commands via shell metacharacters in the pip parameter in an Ajax tagipPing request, a different vulnerability than CVE-2013-3581...