critical9.8Public exploit code
CVE-2015-7246
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root account and tw for the tw account, which mak…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- D-Link DVGN5402SP - Multiple Vulnerabilities2016-02-04 · webapps · hardware
Impact
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root account and tw for the tw account, which makes it easier for remote attackers to obtain administrative access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| D-Link | Dvg-N5402sp Firmware | Versions w1000cn-00, w1000cn-03, w2000en-00 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/135590/D-Link-DVG-N5402SP-Path-Traversal-Information-Disclosure.html
- http://seclists.org/fulldisclosure/2016/Feb/24
- https://www.exploit-db.com/exploits/39409/
- http://packetstormsecurity.com/files/135590/D-Link-DVG-N5402SP-Path-Traversal-Information-Disclosure.html
- http://seclists.org/fulldisclosure/2016/Feb/24
- https://www.exploit-db.com/exploits/39409/