Vulnerability Details CVE-2015-0152
D-Link DIR-815 devices with firmware before 2.07.B01 allow remote attackers to obtain sensitive information by leveraging cleartext storage of the administrative password.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 71.4%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 5.0
References
- ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-815/REVB/DIR-815_REVB_FIRMWARE_PATCH_NOTES_2.07.B01_EN.PDF
- https://exchange.xforce.ibmcloud.com/vulnerabilities/110585
- ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-815/REVB/DIR-815_REVB_FIRMWARE_PATCH_NOTES_2.07.B01_EN.PDF
- https://exchange.xforce.ibmcloud.com/vulnerabilities/110585
Products affected by CVE-2015-0152
-
cpe:2.3:h:dlink:dir-815:-
-
cpe:2.3:o:dlink:dir-815_firmware:-
-
cpe:2.3:o:dlink:dir-815_firmware:1.0.1
-
cpe:2.3:o:dlink:dir-815_firmware:1.01ssb08.bin
-
cpe:2.3:o:dlink:dir-815_firmware:1.03
-
cpe:2.3:o:dlink:dir-815_firmware:1.04
-
cpe:2.3:o:dlink:dir-815_firmware:2.03.b02