PT-2015-3346
CVE-2016-10177
·
Publicado
2015-12-04
·
Atualizado
2021-04-23
Descrição por
CVSS 3.1
10
CríticaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
D-Link DWR-932B router (affected versions not specified)
Description
The issue is related to the use of predefined accounts
admin and root with passwords admin and 1234 respectively. An attacker can exploit this to gain access to the device with root privileges using the Telnet or SSH protocol.Recommendations
For the D-Link DWR-932B router, consider changing the default passwords for the
admin and root accounts to prevent unauthorized access.
As a temporary workaround, consider disabling the Telnet and SSH services until secure passwords are set.
Restrict access to the router's administration interface to minimize the risk of exploitation.Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾