CVE-2016-1559: Infoleak
First published: Fri Apr 21 2017(Updated: )
D-Link DAP-1353 H/W vers. B1 3.15 and earlier, D-Link DAP-2553 H/W ver. A1 1.31 and earlier, and D-Link DAP-3520 H/W ver. A1 1.16 and earlier reveal wireless passwords and administrative usernames and passwords over SNMP.
Credit: cret@cert.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| D-link Dap-1353 H\/w B1 Firmware | =3.15 | |
| Dlink Dap-1353 H\/w B1 | ||
| D-link Dap-2553 H\/w A1 Firmware | =1.31 | |
| Dlink Dap-2553 H\/w A1 | ||
| D-link Dap-3520 H\/w A1 Firmware | =1.16 | |
| Dlink Dap-3520 H\/w A1 |
Remedy
http://www.dlink.com/mk/mk/support/support-news/2016/march/16/firmadyne-cve_2016_1558-cve_2016_1559
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-1559?
CVE-2016-1559 is categorized as a high-severity vulnerability due to the exposure of sensitive information such as wireless passwords and administrative credentials.
How do I fix CVE-2016-1559?
To fix CVE-2016-1559, upgrade the affected D-Link devices to the latest firmware versions that have addressed this vulnerability.
Which D-Link devices are affected by CVE-2016-1559?
CVE-2016-1559 affects D-Link DAP-1353 (H/W ver. B1 3.15 and earlier), DAP-2553 (H/W ver. A1 1.31 and earlier), and DAP-3520 (H/W ver. A1 1.16 and earlier).
What information is exposed in CVE-2016-1559?
CVE-2016-1559 exposes wireless passwords along with administrative usernames and passwords via SNMP.
Is there a workaround for CVE-2016-1559?
While upgrading firmware is the primary solution, disabling SNMP on the affected devices can serve as a temporary workaround for CVE-2016-1559.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/remedy
- agent/author
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- agent/tags
- agent/source
- vendor/d-link
- canonical/d-link dap-1353 h\/w b1 firmware
- version/d-link dap-1353 h\/w b1 firmware/3.15
- vendor/dlink
- canonical/dlink dap-1353 h\/w b1
- canonical/d-link dap-2553 h\/w a1 firmware
- version/d-link dap-2553 h\/w a1 firmware/1.31
- canonical/dlink dap-2553 h\/w a1
- canonical/d-link dap-3520 h\/w a1 firmware
- version/d-link dap-3520 h\/w a1 firmware/1.16
- canonical/dlink dap-3520 h\/w a1