D-Link DSR-500N Default Account Vulnerability

A security vulnerability exists in the D-Link DSR-500N, a wireless router from D-Link, Taiwan, China, which stems from the fact that version 1.02 of the D-Link DSR-500N contains hard-coded credentials for user accounts that are not documented in the “etc/passwd” file. The vulnerability is caused by version 1.02 of the D-Link DSR-500N containing hard-coded credentials for user accounts that are not documented in the “etc/passwd” file. An attacker could use this vulnerability to successfully recover a plaintext password that identifies a hash value.