PT-2015-3346
CVE-2016-10177
·
Published
2015-12-04
·
Updated
2021-04-23
Description by
CVSS 3.1
10
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
D-Link DWR-932B router (affected versions not specified)
Description
The issue is related to the use of predefined accounts
admin and root with passwords admin and 1234 respectively. An attacker can exploit this to gain access to the device with root privileges using the Telnet or SSH protocol.Recommendations
For the D-Link DWR-932B router, consider changing the default passwords for the
admin and root accounts to prevent unauthorized access.
As a temporary workaround, consider disabling the Telnet and SSH services until secure passwords are set.
Restrict access to the router's administration interface to minimize the risk of exploitation.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾