CVE-2015-7246
CriticalSummary
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of 'root' for the root account and 'tw' for the tw account, making it easier for remote attackers to gain administrative access.
Risk Assessment
Default passwords can be easily exploited by attackers, leading to unauthorized access to the device and potential damage to the network infrastructure.
Recommendation
It is recommended to immediately change default passwords to strong, unique passwords and conduct regular security audits of devices.
Other vulnerabilities in D-Link DVG-N5402SP
See all- CVE-2015-7245High
CVE-2015-7245 describes a vulnerability in the D-Link DVG-N5402SP device with specific firmware versions that allows remote attackers to read sensitive information. This vulnerability is due to directory traversal via the errorpage parameter.
- CVE-2015-7247Critical
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses usernames, passwords, keys, values, and web account hashes (super and admin) in plaintext when running a configuration backup.
Original NVD description (English source)
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root account and tw for the tw account, which makes it easier for remote attackers to obtain administrative access.