D-Link DSR Router Series Account Credentials Multiple Information Disclosure Vulnerabilities

Bugtraq ID:	64461
Class:	Design Error
CVE:	CVE-2013-7005
Remote:	No
Local:	Yes
Published:	Dec 19 2013 12:00AM
Updated:	Dec 19 2013 12:00AM
Credit:	Unknown
Vulnerable:	D-Link DSR-500N 0 D-Link DSR-500 0 D-Link DSR-250N 0 D-Link DSR-250 0 D-Link DSR-150N 0 D-Link DSR-150 0 D-Link DSR-1000N 0 D-Link DSR-1000 0
Not Vulnerable:	D-Link DSR-500N 1.08B77 D-Link DSR-500 1.08B77 D-Link DSR-250N 1.08B44 D-Link DSR-250 1.08B44 D-Link DSR-150N 1.05B64 D-Link DSR-150 1.08B44 D-Link DSR-1000N 1.08B77 D-Link DSR-1000 1.08B77

D-Link DSR Router Series Account Credentials Multiple Information Disclosure Vulnerabilities

D-Link DSR Router Series are prone to multiple information-disclosure vulnerabilities.

Successful exploits may allow attackers to gain access to sensitive information. Information obtained may lead to further attacks.

D-Link DSR Router Series Account Credentials Multiple Information Disclosure Vulnerabilities

Attackers require local interactive access to an affected computer to exploit these issues.

D-Link DSR Router Series Account Credentials Multiple Information Disclosure Vulnerabilities

Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.

D-Link DSR Router Series Account Credentials Multiple Information Disclosure Vulnerabilities

References:

• D-Link DSR-500N Wireless Services Router Product Page (D-Link)
  
• D-Link Homepage (D-Link)