CVE-2018-14067: Command Injection
Green Packet WiMax DV-360 2.10.14-g1.0.6.1 devices allow Command Injection, with unauthenticated remote command execution, via a crafted payload to the HTTPS port, because lighttpd listens on all network interfaces (including the external Internet) by default. NOTE: this may overlap CVE-2017-9980.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-14067?
CVE-2018-14067 has a high severity rating due to its potential for unauthenticated remote command execution.
How do I fix CVE-2018-14067?
To fix CVE-2018-14067, it is recommended to upgrade the firmware of the Green Packet DV-360 device to a version that addresses this vulnerability.
What devices are affected by CVE-2018-14067?
CVE-2018-14067 specifically affects Green Packet DV-360 devices running firmware version 2.10.14-g1.0.6.1.
What type of vulnerability is CVE-2018-14067?
CVE-2018-14067 is classified as a command injection vulnerability that can allow remote code execution.
Is authentication required to exploit CVE-2018-14067?
No, CVE-2018-14067 can be exploited without authentication, posing a significant security risk to the affected devices.