CVE-2015-7246

This flaw is basically “factory login still enabled.” The device ships with well-known default usernames and passwords for its administrator accounts (root/root and tw/tw). If those defaults weren’t changed, someone who can reach the device’s admin interface over the network can log in and take control—like getting the keys to the office desk that everyone uses.

This matters if you run or manage a D-Link DVG-N5402SP that is still on firmware W1000CN-00, W1000CN-03, or W2000EN-00 and the default credentials were never changed. The risk is specifically about an attacker being able to reach the router’s administrative interface over the network; in the default configuration, it’s not considered reachable, but it becomes a risk if remote/admin access is exposed or misconfigured. No user interaction is needed once the attacker has network access and the defaults remain unchanged.

Treat this as urgent because attackers can log in as an administrator using publicly known default credentials, which is a direct path to control of the device. The verdict for this item is AMBER: it’s not guaranteed to be reachable in a default setup, but if your admin interface is reachable and you still use defaults, it should be addressed now.