Overview
- Description
- D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses usernames, passwords, keys, values, and web account hashes (super and admin) in plaintext when running a configuration backup, which allows remote attackers to obtain sensitive information.
- Source
- cret@cert.org
- NVD status
- Analyzed
Risk scores
CVSS 3.0
- Type
- Primary
- Base score
- 9.8
- Impact score
- 5.9
- Exploitability score
- 3.9
- Vector string
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- CRITICAL
CVSS 2.0
- Type
- Primary
- Base score
- 7.8
- Impact score
- 6.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:C/I:N/A:N
Weaknesses
- nvd@nist.gov
- CWE-200
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:d-link:dvg-n5402sp_firmware:w1000cn-00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9E680460-D6EC-4F2D-BC22-809E3EC760D5"
},
{
"criteria": "cpe:2.3:o:d-link:dvg-n5402sp_firmware:w1000cn-03:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F205BCFB-2DFF-4C70-9A8A-9543429EE4A6"
},
{
"criteria": "cpe:2.3:o:d-link:dvg-n5402sp_firmware:w2000en-00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "167065E0-5D65-4990-B1BC-7CC508D5E316"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:dlink:dvg-n5402sp:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "075479F8-8E2B-45C9-9D6E-33245F9DABF0"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]