PT-2018-4331 · D Link · Dir-815

Published 2018-04-12 · Updated 2023-04-26 · CVE-2015-0152

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions D-Link DIR-815 versions prior to 2.07.B01

Description The issue allows remote attackers to obtain sensitive information by leveraging cleartext storage of the administrative password.

Recommendations For versions prior to 2.07.B01, update the firmware to version 2.07.B01 or later to resolve the issue. As a temporary workaround, consider restricting remote access to the device until the update is applied.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2015-0152

Affected Products

Dir-815

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-0152 · Security Note
• ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-815/REVB/DIR-815_REVB_FIRMWARE_PATCH_NOTES_2.07.B01_EN.PDF · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/110585 · Note