CVE-2015-7245

2017-04-2418:00:00

certcc

www.cve.org

AI Score

7.4

Confidence

High

EPSS

0.964

Percentile

99.6%

JSON

Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 allows remote attackers to read sensitive information via a … (dot dot) in the errorpage parameter.

References

packetstormsecurity.com/files/135590/D-Link-DVG-N5402SP-Path-Traversal-Information-Disclosure.html

seclists.org/fulldisclosure/2016/Feb/24

www.exploit-db.com/exploits/39409/