Security readout for executives and security teams
Plain-English summary
This CVE describes a CSRF issue in Green Packet DX-350 firmware v2.8.9.5-g1.4.8-atheeb. A victim already managing the device could be tricked by a web page into changing device settings, specifically enabling UPnP. Public severity, CVSS, and vendor fix information are not provided in the bundle.
Executive priority
Treat this as an exposure-confirmation task rather than an emergency based on current evidence. Prioritize any internet-reachable or widely administered DX-350 devices, because enabling UPnP can weaken network boundary controls.
Technical view
The reported flaw is cross-site request forgery against ajax.cgi, demonstrated by a request that enables UPnP on the Green Packet DX-350 firmware version named in the CVE description. The bundle does not provide CVSS, CWE mapping, authenticated state requirements, patch details, or a vendor advisory.
Likely exposure
Exposure appears limited to environments running the named Green Packet DX-350 firmware version. The structured affected-product data is incomplete, so asset teams should confirm device model and firmware from inventory rather than relying on CPE matching alone.
Exploitation context
The source bundle does not show CISA KEV listing or active exploitation evidence. CSRF normally requires a logged-in or reachable administrator context and user interaction, but the exact conditions are not documented in the provided sources.
Researcher notes
The public record is thin: one CVE description and a blog reference. No CVSS vector, patch version, vendor statement, exploit-in-the-wild claim, or complete affected-product metadata is present in the provided bundle.
Mitigation direction
- Check Green Packet or ISP vendor guidance for firmware updates or configuration advice.
- Identify and prioritize DX-350 devices running v2.8.9.5-g1.4.8-atheeb.
- Restrict router administration interfaces to trusted internal networks.
- Disable UPnP where business use does not require it.
- Review administrative access controls and session handling for exposed devices.
Validation and detection
- Inventory Green Packet DX-350 devices and record exact firmware versions.
- Confirm whether UPnP is enabled on affected devices.
- Review change history for unexpected UPnP configuration changes.
- Assess whether management interfaces are reachable from untrusted networks.
- Document vendor advisory status or absence for remediation tracking.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2017-9930 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://iscouncil.blogspot.com/2017/07/green-packet-dx-350-vulnerable-to-csrf.htmlCVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.