PT-2015-3329 · D Link · D-Link Dvg-N5402Sp

Karn Ganeshen · Published 2015-09-01 · Updated 2023-04-26 · CVE-2015-7246

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DVG-N5402SP with firmware W1000CN-00 D-Link DVG-N5402SP with firmware W1000CN-03 D-Link DVG-N5402SP with firmware W2000EN-00

Description The issue is related to the use of default passwords for the root and tw accounts in the D-Link DVG-N5402SP router. The default password for the root account is root and for the tw account is tw. This makes it easier for remote attackers to obtain administrative access.

Recommendations For D-Link DVG-N5402SP with firmware W1000CN-00, change the default passwords for the root and tw accounts to secure ones. For D-Link DVG-N5402SP with firmware W1000CN-03, change the default passwords for the root and tw accounts to secure ones. For D-Link DVG-N5402SP with firmware W2000EN-00, change the default passwords for the root and tw accounts to secure ones.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

BDU:2017-02418

CVE-2015-7246

Affected Products

D-Link Dvg-N5402Sp

References · 5

• 🔥 https://exploit-db.com/exploits/39409 · Exploit
• 🔥 http://packetstormsecurity.com/files/135590/D-Link-DVG-N5402SP-Path-Traversal-Information-Disclosure.html · Exploit
• 🔥 http://seclists.org/fulldisclosure/2016/Feb/24 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-7246 · Security Note
• https://bdu.fstec.ru/vul/2017-02418 · Security Note