Critical severity9.8NVD Advisory· Published Apr 24, 2017· Updated Jun 17, 2026
CVE-2015-7247
CVE-2015-7247
Description
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses usernames, passwords, keys, values, and web account hashes (super and admin) in plaintext when running a configuration backup, which allows remote attackers to obtain sensitive information.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:o:d-link:dvg-n5402sp_firmware:w1000cn-00:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:d-link:dvg-n5402sp_firmware:w1000cn-00:*:*:*:*:*:*:*
- cpe:2.3:o:d-link:dvg-n5402sp_firmware:w1000cn-03:*:*:*:*:*:*:*
- cpe:2.3:o:d-link:dvg-n5402sp_firmware:w2000en-00:*:*:*:*:*:*:*
- (no CPE)range: W1000CN-00, W1000CN-03, or W2000EN-00
Patches
Vulnerability mechanics
References
3- packetstormsecurity.com/files/135590/D-Link-DVG-N5402SP-Path-Traversal-Information-Disclosure.htmlnvdExploitThird Party AdvisoryVDB Entry
- seclists.org/fulldisclosure/2016/Feb/24nvdExploitThird Party AdvisoryVDB Entry
- www.exploit-db.com/exploits/39409/nvdExploitThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.