PT-2015-3346 · D Link · D-Link Dwr-932B

Pierre Kim · Published 2015-12-04 · Updated 2021-04-23 · CVE-2016-10177

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DWR-932B router (affected versions not specified)

Description The issue is related to the use of predefined accounts admin and root with passwords admin and 1234 respectively. An attacker can exploit this to gain access to the device with root privileges using the Telnet or SSH protocol.

Recommendations For the D-Link DWR-932B router, consider changing the default passwords for the admin and root accounts to prevent unauthorized access. As a temporary workaround, consider disabling the Telnet and SSH services until secure passwords are set. Restrict access to the router's administration interface to minimize the risk of exploitation.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

BDU:2017-02551

CVE-2016-10177

Affected Products

D-Link Dwr-932B

References · 5

• 🔥 https://pierrekim.github.io/blog/2016-09-28-dlink-dwr-932b-lte-routers-vulnerabilities.html · Exploit
• https://bdu.fstec.ru/vul/2017-02551 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-10177 · Security Note
• https://osv.dev/vulnerability/CVE-2016-10177 · Vendor Advisory
• http://securityfocus.com/bid/95877 · Note