CVE-2017-9930

Cross-Site Request Forgery CSRF exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as demonstrated by a request to ajax.cgi that enables UPnP...

CVE-2017-9930

CVE-2017-9930 affects Green Packet DX-350 firmware version v2.8.9.5-g1.4.8-atheeb. The CSRF vulnerability is triggered by a request to ajax.cgi that enables UPnP, exposing control of UPnP functionality to an attacker. The linked sources confirm the device and firmware version, and describe the vu...