CVE-2013-7005
4.9
Vector
AV:L/AC:L/Au:N/C:C/I:N/A:N
Exploitability: 3.9 / Impact: 6.9
Source: NVD
Description
D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 stores account passwords in cleartext, which allows local users to obtain sensitive information by reading the Users[#]["Password"] fields in /tmp/teamf1.cfg.ascii.
Affected (71)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.08b29 | |
| All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.08b39 | |
| All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.08b51 | |
| All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.05b48 | |
| All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.08b51 | |
| All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.08b51 | |
| All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.08b39 |
| Running on/with | Platform Versions |
|---|---|
Dlink Dsr 250n | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.08b51 | |
| All versions |
References (2)
Timeline
No history available yet.