Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 allows remote attackers to read sensitive information via a .. (dot dot) in the errorpage parameter.
Search vulnerabilities
CVE-2015-7245
CVSS 3.0 · 7.5 High
EPSS 45.5%
KEV · Not listed
Vendors
Products
CVE-2015-7246
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root account and tw for the tw account, which makes it easier for remote attackers to obtain administrative access.
CVSS 3.0 · 9.8 Critical
EPSS 14.3%
KEV · Not listed
Vendors
Products
CVE-2015-7247
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses usernames, passwords, keys, values, and web account hashes (super and admin) in plaintext when running a configuration backup, which allows remote attackers to obtain sensitive information.
CVSS 3.0 · 9.8 Critical
EPSS 10.2%
KEV · Not listed
Vendors
Products
Page 1 of 1.