D-Link DVG-N5402SP with firmware W1000CN-00 W1000CN-03 or W2000EN-00 discloses usernames passwords keys values and web account hashes (super and admin) in plaintext when running a configuration backup which allows remote attackers to obtain sensitive information.