Vulnerability Details CVE-2015-7245
Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 allows remote attackers to read sensitive information via a .. (dot dot) in the errorpage parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.854
EPSS Ranking 99.3%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- http://packetstormsecurity.com/files/135590/D-Link-DVG-N5402SP-Path-Traversal-Information-Disclosure.html
- http://seclists.org/fulldisclosure/2016/Feb/24
- https://www.exploit-db.com/exploits/39409/
- http://packetstormsecurity.com/files/135590/D-Link-DVG-N5402SP-Path-Traversal-Information-Disclosure.html
- http://seclists.org/fulldisclosure/2016/Feb/24
- https://www.exploit-db.com/exploits/39409/
Products affected by CVE-2015-7245
-
cpe:2.3:h:dlink:dvg-n5402sp:-
-
cpe:2.3:o:d-link:dvg-n5402sp_firmware:w1000cn-00
-
cpe:2.3:o:d-link:dvg-n5402sp_firmware:w1000cn-03
-
cpe:2.3:o:d-link:dvg-n5402sp_firmware:w2000en-00