CVE-2013-7004

CWE-2553 documents3 sources
Severity
7.8HIGH
EPSS
0.3%
top 43.85%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
Dlink Dsr-1000 FirmwareDlink Dsr-1000n FirmwareDlink Dsr-150 Firmware+5 more
Timeline
PublishedDec 19
Latest updateMay 17

Description

D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 have a hardcoded account of username gkJ9232xXyruTRmY, which makes it easier for remote attackers to obtain access by leveraging knowledge of the username.

CVSS vector

AV:N/AC:L/C:C/I:N/A:NExploitability: 10.0 | Impact: 6.9

Affected Packages8 packages

▶NVDdlink/dsr-1000n_firmware1.08b51+11
▶NVDdlink/dsr-1000_firmware1.08b51+11
▶NVDdlink/dsr-500n_firmware1.08b51+10

🔴Vulnerability Details

2
GHSA
GHSA-rrmc-jw5p-mf7q: D-Link DSR-150 with firmware before 1↗2022-05-17
▶
CVEList
CVE-2013-7004: D-Link DSR-150 with firmware before 1↗2013-12-19
▶
CVE-2013-7004 (HIGH CVSS 7.8) | D-Link DSR-150 with firmware before | cvebase.io