PT-2015-3329 · D Link · D-Link Dvg-N5402Sp

Karn Ganeshen · CVE-2015-7246 · Publicado 2015-09-01 · Atualizado 2023-04-26

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DVG-N5402SP with firmware W1000CN-00 D-Link DVG-N5402SP with firmware W1000CN-03 D-Link DVG-N5402SP with firmware W2000EN-00

Description The issue is related to the use of default passwords for the root and tw accounts in the D-Link DVG-N5402SP router. The default password for the root account is root and for the tw account is tw. This makes it easier for remote attackers to obtain administrative access.

Recommendations For D-Link DVG-N5402SP with firmware W1000CN-00, change the default passwords for the root and tw accounts to secure ones. For D-Link DVG-N5402SP with firmware W1000CN-03, change the default passwords for the root and tw accounts to secure ones. For D-Link DVG-N5402SP with firmware W2000EN-00, change the default passwords for the root and tw accounts to secure ones.

Exploit

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

BDU:2017-02418

CVE-2015-7246

Produtos afetados

D-Link Dvg-N5402Sp

Referências · 5

• 🔥 https://exploit-db.com/exploits/39409 · Exploit
• 🔥 http://packetstormsecurity.com/files/135590/D-Link-DVG-N5402SP-Path-Traversal-Information-Disclosure.html · Exploit
• 🔥 http://seclists.org/fulldisclosure/2016/Feb/24 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-7246 · Nota de Segurança
• https://bdu.fstec.ru/vul/2017-02418 · Nota de Segurança