CVE-2013-7005

CWE-200 — Information Exposure3 documents3 sources
Severity
4.9MEDIUM
EPSS
0.0%
top 89.19%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
Dlink Dsr-1000 FirmwareDlink Dsr-1000n FirmwareDlink Dsr-150 Firmware+5 more
Timeline
PublishedDec 19
Latest updateMay 17

Description

D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 stores account passwords in cleartext, which allows local users to obtain sensitive information by reading the Users[#]["Password"] fields in /tmp/teamf1.cfg.ascii.

CVSS vector

AV:L/AC:L/C:C/I:N/A:NExploitability: 3.9 | Impact: 6.9

Affected Packages8 packages

▶NVDdlink/dsr-1000n_firmware1.08b51+11
▶NVDdlink/dsr-1000_firmware1.08b51+11
▶NVDdlink/dsr-500n_firmware1.08b51+10

🔴Vulnerability Details

2
GHSA
GHSA-859c-w96r-58jw: D-Link DSR-150 with firmware before 1↗2022-05-17
▶
CVEList
CVE-2013-7005: D-Link DSR-150 with firmware before 1↗2013-12-19
▶
CVE-2013-7005 (MEDIUM CVSS 4.9) | D-Link DSR-150 with firmware before | cvebase.io