CVE-2015-7245

published 2017-04-24

CVE-2015-7245: Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 allows remote attackers to read sensitive…

high 7.5 CVSS 3.0

AV N AC L PR N UI N S U C H I N A N

EXPLOIT

Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 allows remote attackers to read sensitive information via a .. (dot dot) in the errorpage parameter.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
d-link	dvg-n5402sp_firmware	—	—
d-link	dvg-n5402sp_firmware	—	—
d-link	dvg-n5402sp_firmware	—	—

CWE-22