D-Link Dvg-n5402sp Firmware vulnerabilities

3 CVEs affecting D-Link Dvg-n5402sp Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-7247, published 2017-04-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-7245, published 2017-04-24. High severity, CVSS 7.5. EPSS: 45.5% chance of exploitation in the next 30 days. Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 allows remote attackers to read sensitive information via a .. (dot dot) in the errorpage…
CVE-2015-7246, published 2017-04-24. Critical severity, CVSS 9.8. EPSS: 14.3% chance of exploitation in the next 30 days. D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root account and tw for the tw account, which makes it easier for remote attackers to…
CVE-2015-7247, published 2017-04-24. Critical severity, CVSS 9.8. EPSS: 10.2% chance of exploitation in the next 30 days. D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses usernames, passwords, keys, values, and web account hashes (super and admin) in plaintext when running a configuration…