critical9.8Public exploit code
CVE-2015-7247
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses usernames, passwords, keys, values, and web account hashes (super and admin) i…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- D-Link DVGN5402SP - Multiple Vulnerabilities2016-02-04 · webapps · hardware
Impact
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses usernames, passwords, keys, values, and web account hashes (super and admin) in plaintext when running a configuration backup, which allows remote attackers to obtain sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| D-Link | Dvg-N5402sp Firmware | Versions w1000cn-00, w1000cn-03, w2000en-00 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/135590/D-Link-DVG-N5402SP-Path-Traversal-Information-Disclosure.html
- http://seclists.org/fulldisclosure/2016/Feb/24
- https://www.exploit-db.com/exploits/39409/
- http://packetstormsecurity.com/files/135590/D-Link-DVG-N5402SP-Path-Traversal-Information-Disclosure.html
- http://seclists.org/fulldisclosure/2016/Feb/24
- https://www.exploit-db.com/exploits/39409/