CVE-2013-7005

CVE-2013-7005 affects D-Link DSR router series (DSR-150, DSR-150N, DSR-250/250N, DSR-500/500N, DSR-1000/1000N). Firmware versions before listed fixes store account passwords in cleartext in /tmp/teamf1.cfg.ascii, exposing them to local users who can read the Password fields. Affected firmware: DS...

CVE-2013-5946

CVE-2013-5946 affects D-Link DSR router series (DSR-150, DSR-150N, DSR-250/250N, DSR-500/500N, DSR-1000/1000N). The root cause is lack of input filtering in the /scgi-bin/platform.cgi script, enabling remote command execution via shell metacharacters in the Ping or Trace an IP Address and DNS Loo...

CVE-2013-7004

CVE-2013-7004 affects multiple D-Link DSR router models (DSR-150/150N/250/250N/500/500N/1000/1000N) with specific firmware versions vulnerable to a hardcoded admin username (gkJ9232xXyruTRmY). The root cause is the presence of a hardcoded credential that enables remote access by knowledge of the ...