PT-2015-3346

CVE-2016-10177

·

Published

2015-12-04

·

Updated

2021-04-23

Description by

CVSS 3.1
10
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions D-Link DWR-932B router (affected versions not specified)
Description The issue is related to the use of predefined accounts admin and root with passwords admin and 1234 respectively. An attacker can exploit this to gain access to the device with root privileges using the Telnet or SSH protocol.
Recommendations For the D-Link DWR-932B router, consider changing the default passwords for the admin and root accounts to prevent unauthorized access. As a temporary workaround, consider disabling the Telnet and SSH services until secure passwords are set. Restrict access to the router's administration interface to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾