All packages
D-Link DVG-N5402SP vulnerabilities
3 known CVE vulnerabilities in D-Link DVG-N5402SP, translated and rated.
- CVE-2015-7245High
CVE-2015-7245 describes a vulnerability in the D-Link DVG-N5402SP device with specific firmware versions that allows remote attackers to read sensitive information. This vulnerability is due to directory traversal via the errorpage parameter.
- CVE-2015-7247Critical
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses usernames, passwords, keys, values, and web account hashes (super and admin) in plaintext when running a configuration backup.
- CVE-2015-7246Critical
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of 'root' for the root account and 'tw' for the tw account, making it easier for remote attackers to gain administrative access.