← back
CVE-2015-7247

CVE-2015-7247

EPSS 10.2%
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses usernames, passwords, keys, values, and web account hashes (super and admin) in plaintext when running a configuration backup, which allows remote attackers to obtain sensitive information.
Affected products
n/a · n/a
public PoCs found — 3
cve_referencepacketstormsecurity.com/files/135590/D-Link-DVG-N5402SP-Path-Traversal-Information-Disclosure.htmlunverifiedcve_referencewww.exploit-db.com/exploits/39409/unverifiedexploitdbwww.exploit-db.com/exploits/39409unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/135590/D-Link-DVG-N5402SP-Path-Traversal-Information-Disclosure.htmlhttp://seclists.org/fulldisclosure/2016/Feb/24https://www.exploit-db.com/exploits/39409/