CVE-2013-7004

D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 have a hardcoded account of username gkJ9232xXyruTRmY, which makes it easier for remote attackers to obtain access by leveraging knowledge of the username.

CVSS v2.0

7.8 HIGHAV:N/AC:L/Au:N/C:C/I:N/A:N

EPSS

1.88% chance of exploitation in the next 30 days, 78th percentile

Published

2013-12-19

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/30061

References

• CVE Record
• NVD entry

Related

• CVE-2013-6987
• CVE-2013-7005
• CVE-2013-6985
• CVE-2013-7009
• CVE-2013-6976
• CVE-2013-7013