CVE-2015-7245: Path Traversal

Published Apr 24, 2017

Updated

Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 allows remote attackers to read sensitive information via a .. (dot dot) in the errorpage parameter.

Affected Software

4 affected components

D-Link Dvg-n5402sp Firmware=w1000cn-00

D-Link Dvg-n5402sp Firmware=w1000cn-03

D-Link Dvg-n5402sp Firmware=w2000en-00

Dlink Dvg-n5402sp

Event History

Apr 24, 2017

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-7245?

CVE-2015-7245 is classified as a high severity vulnerability due to its potential for unauthorized access to sensitive information.

How do I fix CVE-2015-7245?

To fix CVE-2015-7245, update the firmware of the D-Link DVG-N5402SP to the latest version that addresses this vulnerability.

What does CVE-2015-7245 allow attackers to do?

CVE-2015-7245 allows remote attackers to read sensitive information by exploiting a directory traversal vulnerability.

Which versions of D-Link DVG-N5402SP are affected by CVE-2015-7245?

CVE-2015-7245 affects the D-Link DVG-N5402SP firmware versions w1000cn-00, w1000cn-03, and w2000en-00.

Is there a known exploit for CVE-2015-7245?

Yes, CVE-2015-7245 has been documented in various security reports and exploit databases.