CVE-2015-7246: Critical severity d-link dvg-n5402sp vulnerability

Published Apr 24, 2017

Updated

D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root account and tw for the tw account, which makes it easier for remote attackers to obtain administrative access.

Affected Software

4 affected components

D-Link Dvg-n5402sp Firmware=w1000cn-00

D-Link Dvg-n5402sp Firmware=w1000cn-03

D-Link Dvg-n5402sp Firmware=w2000en-00

Dlink Dvg-n5402sp

Event History

Apr 24, 2017

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-7246?

CVE-2015-7246 has a high severity level due to the use of default passwords that allow unauthorized access to administrative accounts.

How do I fix CVE-2015-7246?

To fix CVE-2015-7246, change the default passwords for the root and tw accounts to strong, unique passwords.

What systems are affected by CVE-2015-7246?

CVE-2015-7246 affects the D-Link DVG-N5402SP with firmware versions W1000CN-00, W1000CN-03, and W2000EN-00.

Can CVE-2015-7246 be exploited remotely?

Yes, CVE-2015-7246 can be exploited remotely, allowing attackers to gain administrative access to the device.

What are the default passwords associated with CVE-2015-7246?

The default passwords for CVE-2015-7246 are 'root' for the root account and 'tw' for the tw account.