D-Link DSR Router Series CVE-2013-7004 Hardcoded Credentials Security Bypass Vulnerability

Bugtraq ID:	64462
Class:	Design Error
CVE:	CVE-2013-7004
Remote:	Yes
Local:	No
Published:	Dec 20 2013 12:00AM
Updated:	Dec 20 2013 12:00AM
Credit:	nu11.nu11
Vulnerable:	D-Link DSR-500N 0 D-Link DSR-500 0 D-Link DSR-250N 0 D-Link DSR-250 0 D-Link DSR-150N 0 D-Link DSR-150 0 D-Link DSR-1000N 0 D-Link DSR-1000 0
Not Vulnerable:	D-Link DSR-500N 1.08B77 D-Link DSR-500 1.08B77 D-Link DSR-250N 1.08B44 D-Link DSR-250 1.08B44 D-Link DSR-150N 1.05B64 D-Link DSR-150 1.08B44 D-Link DSR-1000N 1.08B77 D-Link DSR-1000 1.08B77

D-Link DSR Router Series CVE-2013-7004 Hardcoded Credentials Security Bypass Vulnerability

D-Link DSR Router Series are prone to a security-bypass vulnerability.

Attackers can exploit this issue to bypass the authentication mechanism and gain access to the vulnerable device.

D-Link DSR Router Series CVE-2013-7004 Hardcoded Credentials Security Bypass Vulnerability

An attacker can carry out this attack using readily available network utilities.

D-Link DSR Router Series CVE-2013-7004 Hardcoded Credentials Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

D-Link DSR Router Series CVE-2013-7004 Hardcoded Credentials Security Bypass Vulnerability

References:

• D-Link DSR Router Series patches are available (D-Link)
  
• D-Link Homepage (D-Link)