CVE-2015-7247

published 2017-04-24

CVE-2015-7247: D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses usernames, passwords, keys, values, and web account hashes (super and admin)…

critical 9.8 CVSS 3.0

AV N AC L PR N UI N S U C H I H A H

EXPLOIT

D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses usernames, passwords, keys, values, and web account hashes (super and admin) in plaintext when running a configuration backup, which allows remote attackers to obtain sensitive information.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
d-link	dvg-n5402sp_firmware	—	—
d-link	dvg-n5402sp_firmware	—	—
d-link	dvg-n5402sp_firmware	—	—

CWE-200