PT-2015-3346 · D Link · D-Link Dwr-932B

Pierre Kim · Publicado 2015-12-04 · Atualizado 2021-04-23 · CVE-2016-10177

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DWR-932B router (affected versions not specified)

Description The issue is related to the use of predefined accounts admin and root with passwords admin and 1234 respectively. An attacker can exploit this to gain access to the device with root privileges using the Telnet or SSH protocol.

Recommendations For the D-Link DWR-932B router, consider changing the default passwords for the admin and root accounts to prevent unauthorized access. As a temporary workaround, consider disabling the Telnet and SSH services until secure passwords are set. Restrict access to the router's administration interface to minimize the risk of exploitation.

Exploit

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

BDU:2017-02551

CVE-2016-10177

Produtos afetados

D-Link Dwr-932B

Referências · 5

• 🔥 https://pierrekim.github.io/blog/2016-09-28-dlink-dwr-932b-lte-routers-vulnerabilities.html · Exploit
• https://bdu.fstec.ru/vul/2017-02551 · Nota de Segurança
• http://securityfocus.com/bid/95877 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-10177 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-10177 · Aviso do Fabricante