CVE-2015-7247 D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses usernames, passwords, keys, values, and web account hashes (super and admin) in plaintext when running a configuration....
CriticalCVSS 9.8
EPSS 10.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses usernames, passwords, keys, values, and web account hashes (super and admin) in plaintext when running a configuration backup, which allows remote attackers to obtain sensitive information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| d-link dvg-n5402sp firmware | = w1000cn-00 | No fix listed |
| d-link dvg-n5402sp firmware | = w1000cn-03 | No fix listed |
| d-link dvg-n5402sp firmware | = w2000en-00 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20160203 DLink DVG-N5402SP Multiple Vulnerabilities exploit mailing-list third-party-advisory vdb-entry
- 39409 exploit third-party-advisory vdb-entry