medium4.9
CVE-2013-7005
D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, D…
Impact
D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 stores account passwords in cleartext, which allows local users to obtain sensitive information by reading the Users[#]["Password"] fields in /tmp/teamf1.cfg.ascii.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dlink | Dsr-150 Firmware | through 1.08b29 Versions 1.05b29, 1.05b35, 1.05b46, 1.05b50 |
| Dlink | Dsr-150 | All versions |
| Dlink | Dsr-250 Firmware | through 1.08b39 Versions 1.01b46, 1.01b56, 1.05b20, 1.05b53, 1.08b31 |
| Dlink | Dsr-250 | All versions |
| Dlink | Dsr-1000n Firmware | through 1.08b51 Versions 1.01b50, 1.02b11, 1.02b25, 1.03b12, 1.03b23 |
| Dlink | Dsr-1000n | All versions |
| Dlink | Dsr-150n Firmware | through 1.05b48 |
| Dlink | Dsr-150n | All versions |
| Dlink | Dsr-500 Firmware | through 1.08b51 Versions 1.02b11, 1.02b25, 1.03b12, 1.03b23, 1.03b27 |
| Dlink | Dsr-500 | All versions |
| Dlink | Dsr-1000 Firmware | through 1.08b51 Versions 1.01b50, 1.02b11, 1.02b25, 1.03b12, 1.03b23 |
| Dlink | Dsr-1000 | All versions |