Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-0717


A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825AC, DIR-825ACF, DIR-825ACG1, DIR-841, DIR-842, DIR-842S, DIR-843, DIR-853, DIR-878, DIR-882, DIR-1210, DIR-1260, DIR-2150, DIR-X1530, DIR-X1860, DSL-224, DSL-245GR, DSL-2640U, DSL-2750U, DSL-G2452GR, DVG-5402G, DVG-5402G, DVG-5402GFRU, DVG-N5402G, DVG-N5402G-IL, DWM-312W, DWM-321, DWR-921, DWR-953 and Good Line Router v2 up to 20240112. This vulnerability affects unknown code of the file /devinfo of the component HTTP GET Request Handler. The manipulation of the argument area with the input notice|net|version leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-251542 is the identifier assigned to this vulnerability.


Published

2024-01-19T16:15:11.190

Last Modified

2024-11-21T08:47:12.370

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Secondary
    CWE-200
  • Type: Primary
    NVD-CWE-noinfo

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System dlink dir-825acg1_firmware ≤ 2024-01-12 Yes
Hardware dlink dir-825acg1 - No
Operating System dlink dir-841_firmware ≤ 2024-01-12 Yes
Hardware dlink dir-841 - No
Operating System dlink dir-1260_firmware ≤ 2024-01-12 Yes
Hardware dlink dir-1260 - No
Operating System dlink dir-822_firmware ≤ 2024-01-12 Yes
Hardware dlink dir-822 - No
Operating System dlink dir-x1530_firmware ≤ 2024-01-12 Yes
Hardware dlink dir-x1530 - No
Operating System dlink dir-825_firmware ≤ 2024-01-12 Yes
Hardware dlink dir-825 - No
Operating System dlink dir-615_firmware ≤ 2024-01-12 Yes
Hardware dlink dir-615 - No
Operating System dlink dir-842_firmware ≤ 2024-01-12 Yes
Hardware dlink dir-842 - No
Operating System dlink dir-853_firmware ≤ 2024-01-12 Yes
Hardware dlink dir-853 - No
Operating System dlink dir-1210_firmware ≤ 2024-01-12 Yes
Hardware dlink dir-1210 - No
Operating System dlink dir-806a_firmware ≤ 2024-01-12 Yes
Hardware dlink dir-806a - No
Operating System dlink dir-815_firmware ≤ 2024-01-12 Yes
Hardware dlink dir-815 - No
Operating System dlink dsl-245gr_firmware ≤ 2024-01-12 Yes
Hardware dlink dsl-245gr - No
Operating System dlink dsl-g2452gr_firmware ≤ 2024-01-12 Yes
Hardware dlink dsl-g2452gr - No
Operating System dlink dir-878_firmware ≤ 2024-01-12 Yes
Hardware dlink dir-878 - No
Operating System dlink dir-825acf_firmware ≤ 2024-01-12 Yes
Hardware dlink dir-825acf - No
Operating System dlink dir-615t_firmware ≤ 2024-01-12 Yes
Hardware dlink dir-615t - No
Operating System dlink dir-300_firmware ≤ 2024-01-12 Yes
Hardware dlink dir-300 - No
Operating System dlink dir-842s_firmware ≤ 2024-01-12 Yes
Hardware dlink dir-842s - No
Operating System dlink dir-815s_firmware ≤ 2024-01-12 Yes
Hardware dlink dir-815s - No
Operating System dlink dsl-2640u_firmware ≤ 2024-01-12 Yes
Hardware dlink dsl-2640u - No
Operating System dlink dir-2150_firmware ≤ 2024-01-12 Yes
Hardware dlink dir-2150 - No
Operating System dlink dwr-921_firmware ≤ 2024-01-12 Yes
Hardware dlink dwr-921 - No
Operating System dlink dir-615s_firmware ≤ 2024-01-12 Yes
Hardware dlink dir-615s - No
Operating System dlink dir-620_firmware ≤ 2024-01-12 Yes
Hardware dlink dir-620 - No
Operating System dlink dvg-5402g_firmware ≤ 2024-01-12 Yes
Hardware dlink dvg-5402g - No
Operating System dlink dir-882_firmware ≤ 2024-01-12 Yes
Hardware dlink dir-882 - No
Operating System dlink dwm-312w_firmware ≤ 2024-01-12 Yes
Hardware dlink dwm-312w - No
Operating System dlink dir-815\/ac_firmware ≤ 2024-01-12 Yes
Hardware dlink dir-815\/ac - No
Operating System dlink dsl-224_firmware ≤ 2024-01-12 Yes
Hardware dlink dsl-224 - No
Operating System dlink dwm-321_firmware ≤ 2024-01-12 Yes
Hardware dlink dwm-321 - No
Operating System dlink dir-x1860_firmware ≤ 2024-01-12 Yes
Hardware dlink dir-x1860 - No
Operating System dlink dap-1360_firmware ≤ 2024-01-12 Yes
Hardware dlink dap-1360 - No
Operating System dlink dir-820_firmware ≤ 2024-01-12 Yes
Hardware dlink dir-820 - No
Operating System dlink dir-843_firmware ≤ 2024-01-12 Yes
Hardware dlink dir-843 - No
Operating System dlink dvg-5402g\/gfru_firmware ≤ 2024-01-12 Yes
Hardware dlink dvg-5402g\/gfru - No
Operating System dlink dwr-953_firmware ≤ 2024-01-12 Yes
Hardware dlink dwr-953 - No
Operating System dlink dvg-n5402g\/il_firmware ≤ 2024-01-12 Yes
Hardware dlink dvg-n5402g\/il - No
Operating System dlink dir-825ac_firmware ≤ 2024-01-12 Yes
Hardware dlink dir-825ac - No
Operating System dlink dir-620s_firmware ≤ 2024-01-12 Yes
Hardware dlink dir-620s - No
Operating System dlink dvg-n5402g_firmware ≤ 2024-01-12 Yes
Hardware dlink dvg-n5402g - No
Operating System dlink dsl-2750u_firmware ≤ 2024-01-12 Yes
Hardware dlink dsl-2750u - No
Operating System dlink dir-615gf_firmware ≤ 2024-01-12 Yes
Hardware dlink dir-615gf - No
Operating System dlink dir-816_firmware ≤ 2024-01-12 Yes
Hardware dlink dir-816 - No

References