← All advisories

Critical severity9.8NVD Advisory· Published Oct 26, 2017· Updated Jun 17, 2026

CVE-2017-15909

CVE-2017-15909

Description

D-Link DGS-1500 Ax devices before 2.51B021 have a hardcoded password, which allows remote attackers to obtain shell access.

Affected products

4

Dlink/Dgs 1500 Firmware3 versions
cpe:2.3:o:dlink:dgs-1500_firmware:2.10.002:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:dlink:dgs-1500_firmware:2.10.002:*:*:*:*:*:*:*
- cpe:2.3:o:dlink:dgs-1500_firmware:2.50.008:*:*:*:*:*:*:*
- cpe:2.3:o:dlink:dgs-1500_firmware:2.51.005:*:*:*:*:*:*:*
Dlink/DGS-1500llm-create
Range: <2.51B021

Patches

Vulnerability mechanics

References

4

ftp2.dlink.com/PRODUCTS/DGS-1500-20/REVA/DGS-1500_REVA_FIRMWARE_PATCH_NOTES_2.51.021_EN.pdfnvdVendor Advisory
ftp2.dlink.com/PRODUCTS/DGS-1500-28/REVA/DGS-1500_REVA_FIRMWARE_PATCH_NOTES_2.51.021_EN.pdfnvdVendor Advisory
ftp2.dlink.com/PRODUCTS/DGS-1500-28P/REVA/DGS-1500_REVA_FIRMWARE_PATCH_NOTES_2.51.021_EN.pdfnvdVendor Advisory
ftp2.dlink.com/PRODUCTS/DGS-1500-52/REVA/DGS-1500_REVA_FIRMWARE_PATCH_NOTES_2.51.021_EN.pdfnvdVendor Advisory

News mentions

0

No linked articles in our index yet.