CVE-2017-9932

Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb has a default password of admin for the admin account

published July 21, 2017

CVSS
β€”
EPSS
2%
Percentile
74.2
In the wild
Unconfirmed
What it is

🚨 Default credentials are still lurking! The Green Packet DX-350 has a vulnerable admin account that comes with a built-in password of 'admin' β€” like leaving the front door of your house wide open and just hoping no one walks in! πŸ”₯ Think of it as giving a stranger the keys to your house because you forgot to change the locks after moving in. It's surprisingly common for default passwords to be overlooked, leaving your valuables exposed! An attacker could simply walk right in, gaining full control of the device without breaking a sweat. This could lead to unauthorized access, data breaches, or even taking complete control of your network settings. Yikes!

Put simply

Think of it as giving a stranger the keys to your house because you forgot to change the locks after moving in. It's surprisingly common for default passwords to be overlooked, leaving your valuables exposed! This vulnerability arises from the use of a default password for the admin account in the Green Packet DX-350 firmware version v2.8.9.5-g1.4.8-atheeb, allowing anyone who knows this password to access the device without any authentication required.

What to do

An attacker could simply walk right in, gaining full control of the device without breaking a sweat. This could lead to unauthorized access, data breaches, or even taking complete control of your network settings. Yikes! Change the default admin password immediately to something strong and unique. Regularly review access settings and ensure no other default credentials are in use. It’s a good practice to update the firmware regularly as well, just to keep everything secure! You've got this! With a few simple steps, you can fortify your defenses and keep your network safe! πŸ›‘οΈ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01516 Β· 74.2th percentile
Published
2017-07-21T06:00Z
EPSS history
Timeline
  • 21 JUL 06:00Z
    Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb has a default password of admin for the admin account
    cvelistv5