Directory traversal

2017-04-2418:59:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.964 High

EPSS

Percentile

99.6%

JSON

Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 allows remote attackers to read sensitive information via a … (dot dot) in the errorpage parameter.

CPENameOperatorVersion
dvg-n5402sp_firmwareeqw1000cn-0
dvg-n5402sp_firmwareeqw1000cn-3
dvg-n5402sp_firmwareeqw2000en-0

Name	Operator	Version
dvg-n5402sp_firmware	eq	w1000cn-0
dvg-n5402sp_firmware	eq	w1000cn-3
dvg-n5402sp_firmware	eq	w2000en-0

References

packetstormsecurity.com/files/135590/D-Link-DVG-N5402SP-Path-Traversal-Information-Disclosure.html

seclists.org/fulldisclosure/2016/Feb/24

www.exploit-db.com/exploits/39409/