CVE-2013-7005: dlink dsr-1000_firmware
Vulnerability summary
CVE-2013-7005 is a medium (CVSS 4.9) vulnerability in dlink dsr-1000_firmware. EPSS estimates a 0.66% chance of exploitation in the next 30 days, higher than 50.6% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 19-12-2013PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 stores account passwords in cleartext, which allows local users to obtain sensitive information by reading the Users[#]["Password"] fields in /tmp/teamf1.cfg.ascii.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.66%
Chance of exploitation in the next 30 days
Percentile
51%
Versus all other CVEs
30-day change
0.00 pp
From 0.66% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploitDB 30061
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Dlink8 products
- dsr-1000_firmware≤ 1.08b51 | 1.01b50 | 1.02b11 | 1.02b25 | 1.03b12 | 1.03b23 | 1.03b27 | 1.03b36 | 1.03b43 | 1.04b58 | 1.06b43 | 1.06b53 | na
- dsr-1000n_firmware≤ 1.08b51 | 1.01b50 | 1.02b11 | 1.02b25 | 1.03b12 | 1.03b23 | 1.03b27 | 1.03b36 | 1.03b43 | 1.04b58 | 1.06b43 | 1.06b53 | na
- dsr-150_firmware≤ 1.08b29 | 1.05b29 | 1.05b35 | 1.05b46 | 1.05b50 | na
- dsr-150n_firmware≤ 1.05b48 | na
- dsr-250_firmware≤ 1.08b39 | 1.01b46 | 1.01b56 | 1.05b20 | 1.05b53 | 1.08b31 | na
1 vendor · 8 products