Lucene search

[email protected]CVE-2013-7004

HistoryDec 19, 2013 - 4:24 a.m.

CVE-2013-7004

2013-12-1904:24:57

CWE-255

[email protected]

web.nvd.nist.gov

d-link

dsr

firmware

hardcoded account

remote attackers

cve-2013-7004

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

9.2 High

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

85.7%

JSON

D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 have a hardcoded account of username gkJ9232xXyruTRmY, which makes it easier for remote attackers to obtain access by leveraging knowledge of the username.

Affected configurations

NVD

Node

dlinkdsr-500_firmwareRange≤1.08b51

dlinkdsr-500_firmwareMatch1.02b11

dlinkdsr-500_firmwareMatch1.02b25

dlinkdsr-500_firmwareMatch1.03b12

dlinkdsr-500_firmwareMatch1.03b23

dlinkdsr-500_firmwareMatch1.03b27

dlinkdsr-500_firmwareMatch1.03b36

dlinkdsr-500_firmwareMatch1.03b43

dlinkdsr-500_firmwareMatch1.04b58

dlinkdsr-500_firmwareMatch1.06b43

dlinkdsr-500_firmwareMatch1.06b53

AND

dlinkdsr-500Match-

Node

dlinkdsr-150n_firmwareRange≤1.05b48

AND

dlinkdsr-150nMatch-

Node

dlinkdsr-250n_firmwareRange≤1.08b39

dlinkdsr-250n_firmwareMatch1.01b46

dlinkdsr-250n_firmwareMatch1.01b56

dlinkdsr-250n_firmwareMatch1.05b20

dlinkdsr-250n_firmwareMatch1.05b53

dlinkdsr-250n_firmwareMatch1.08b31

AND

dlinkdsr-250nMatch-

Node

dlinkdsr-150_firmwareRange≤1.08b29

dlinkdsr-150_firmwareMatch1.05b29

dlinkdsr-150_firmwareMatch1.05b35

dlinkdsr-150_firmwareMatch1.05b46

dlinkdsr-150_firmwareMatch1.05b50

AND

dlinkdsr-150Match-

Node

dlinkdsr-500n_firmwareRange≤1.08b51

dlinkdsr-500n_firmwareMatch1.02b11

dlinkdsr-500n_firmwareMatch1.02b25

dlinkdsr-500n_firmwareMatch1.03b12

dlinkdsr-500n_firmwareMatch1.03b23

dlinkdsr-500n_firmwareMatch1.03b27

dlinkdsr-500n_firmwareMatch1.03b36

dlinkdsr-500n_firmwareMatch1.03b43

dlinkdsr-500n_firmwareMatch1.04b58

dlinkdsr-500n_firmwareMatch1.06b43

dlinkdsr-500n_firmwareMatch1.06b53

AND

dlinkdsr-500nMatch-

Node

dlinkdsr-1000n_firmwareRange≤1.08b51

dlinkdsr-1000n_firmwareMatch1.01b50

dlinkdsr-1000n_firmwareMatch1.02b11

dlinkdsr-1000n_firmwareMatch1.02b25

dlinkdsr-1000n_firmwareMatch1.03b12

dlinkdsr-1000n_firmwareMatch1.03b23

dlinkdsr-1000n_firmwareMatch1.03b27

dlinkdsr-1000n_firmwareMatch1.03b36

dlinkdsr-1000n_firmwareMatch1.03b43

dlinkdsr-1000n_firmwareMatch1.04b58

dlinkdsr-1000n_firmwareMatch1.06b43

dlinkdsr-1000n_firmwareMatch1.06b53

AND

dlinkdsr-1000nMatch-

Node

dlinkdsr-250_firmwareRange≤1.08b39

dlinkdsr-250_firmwareMatch1.01b46

dlinkdsr-250_firmwareMatch1.01b56

dlinkdsr-250_firmwareMatch1.05b20

dlinkdsr-250_firmwareMatch1.05b53

dlinkdsr-250_firmwareMatch1.08b31

AND

dlinkdsr-250Match-

Node

dlinkdsr-1000_firmwareRange≤1.08b51

dlinkdsr-1000_firmwareMatch1.01b50

dlinkdsr-1000_firmwareMatch1.02b11

dlinkdsr-1000_firmwareMatch1.02b25

dlinkdsr-1000_firmwareMatch1.03b12

dlinkdsr-1000_firmwareMatch1.03b23

dlinkdsr-1000_firmwareMatch1.03b27

dlinkdsr-1000_firmwareMatch1.03b36

dlinkdsr-1000_firmwareMatch1.03b43

dlinkdsr-1000_firmwareMatch1.04b58

dlinkdsr-1000_firmwareMatch1.06b43

dlinkdsr-1000_firmwareMatch1.06b53

AND

dlinkdsr-1000Match-

CPENameOperatorVersion
dlink:dsr-500_firmwaredlink dsr-500 firmwarele1.08b51
dlink:dsr-500_firmwaredlink dsr-500 firmwareeq1.02b11
dlink:dsr-500_firmwaredlink dsr-500 firmwareeq1.02b25
dlink:dsr-500_firmwaredlink dsr-500 firmwareeq1.03b12
dlink:dsr-500_firmwaredlink dsr-500 firmwareeq1.03b23
dlink:dsr-500_firmwaredlink dsr-500 firmwareeq1.03b27
dlink:dsr-500_firmwaredlink dsr-500 firmwareeq1.03b36
dlink:dsr-500_firmwaredlink dsr-500 firmwareeq1.03b43
dlink:dsr-500_firmwaredlink dsr-500 firmwareeq1.04b58
dlink:dsr-500_firmwaredlink dsr-500 firmwareeq1.06b43

CPE	Name	Operator	Version
dlink:dsr-500_firmware	dlink dsr-500 firmware	le	1.08b51
dlink:dsr-500_firmware	dlink dsr-500 firmware	eq	1.02b11
dlink:dsr-500_firmware	dlink dsr-500 firmware	eq	1.02b25
dlink:dsr-500_firmware	dlink dsr-500 firmware	eq	1.03b12
dlink:dsr-500_firmware	dlink dsr-500 firmware	eq	1.03b23
dlink:dsr-500_firmware	dlink dsr-500 firmware	eq	1.03b27
dlink:dsr-500_firmware	dlink dsr-500 firmware	eq	1.03b36
dlink:dsr-500_firmware	dlink dsr-500 firmware	eq	1.03b43
dlink:dsr-500_firmware	dlink dsr-500 firmware	eq	1.04b58
dlink:dsr-500_firmware	dlink dsr-500 firmware	eq	1.06b43

Rows per page:

1-10 of 121

References

tsd.dlink.com.tw/temp/PMD/12879/DSR-500_500N_1000_1000N_A1_Release_Notes_FW_v1.08B77_WW.pdf

tsd.dlink.com.tw/temp/PMD/12960/DSR-150N_A2_Release_Notes_FW_v1.05B64_WW.pdf

tsd.dlink.com.tw/temp/PMD/12966/DSR-150_A1_A2_Release_Notes_FW_v1.08B44_WW.pdf

tsd.dlink.com.tw/temp/PMD/13039/DSR-250_250N_A1_A2_Release_Notes_FW_v1.08B44_WW_RU.pdf

www.exploit-db.com/exploits/30061

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

9.2 High

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

85.7%

JSON

Related for CVE-2013-7004

prion1 cvelist1 nvd1 openvas1