CVE-2015-7246

D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root account and tw for the tw account, which…

published April 24, 2017

CVSS
—
EPSS
14%
Percentile
96.6
In the wild
Unconfirmed
What it is

🚨 Default passwords are still lingering here! The D-Link DVG-N5402SP comes shipped with "root" for the root account, making it a cakewalk for attackers to gain admin access. 🔥 Think of it like leaving the front door of your office wide open with a sign that says, "Welcome! Please come in, the keys are on the table!" It's a big invite for anyone who walks by. With those default credentials, a remote attacker can waltz right in and take control of your device, potentially wreaking havoc on your network. They could change settings, access sensitive data, or even turn your device into a launching pad for further attacks on your systems.

Put simply

Think of it like leaving the front door of your office wide open with a sign that says, "Welcome! Please come in, the keys are on the table!" It's a big invite for anyone who walks by. The vulnerability arises because the D-Link DVG-N5402SP router has hardcoded default passwords for administrative accounts, allowing unauthorized users to easily gain administrative access if these defaults are not changed post-installation.

What to do

With those default credentials, a remote attacker can waltz right in and take control of your device, potentially wreaking havoc on your network. They could change settings, access sensitive data, or even turn your device into a launching pad for further attacks on your systems. To secure your router, immediately change the default passwords for both the root and tw accounts. If possible, update the firmware to the latest version to patch any other potential weaknesses. Regularly audit your device settings to ensure they are secure. You've got this! Just follow these steps and you'll have your network locked down in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.14299 · 96.6th percentile
Published
2017-04-24T18:00Z
EPSS history
Timeline
  • 24 APR 18:00Z
    D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root account and tw for the tw account, which…
    cvelistv5