CVE-2015-7245
HighSummary
CVE-2015-7245 describes a vulnerability in the D-Link DVG-N5402SP device with specific firmware versions that allows remote attackers to read sensitive information. This vulnerability is due to directory traversal via the errorpage parameter.
Risk Assessment
The organization may be exposed to the disclosure of confidential data, potentially leading to further attacks or breaches of user privacy. Exploitation of this vulnerability by attackers could result in serious security implications.
Recommendation
It is recommended to update the D-Link DVG-N5402SP device firmware to the latest version to mitigate this vulnerability. Additionally, monitoring system logs for potential exploitation attempts is advisable.
Other vulnerabilities in D-Link DVG-N5402SP
See all- CVE-2015-7247Critical
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses usernames, passwords, keys, values, and web account hashes (super and admin) in plaintext when running a configuration backup.
- CVE-2015-7246Critical
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of 'root' for the root account and 'tw' for the tw account, making it easier for remote attackers to gain administrative access.
Original NVD description (English source)
Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 allows remote attackers to read sensitive information via a .. (dot dot) in the errorpage parameter.