Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-10916

A vulnerability classified as problematic has been found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. This affects an unknown part of the file /xml/info.xml of the component HTTP GET Request Handler. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Published

2024-11-06T15:15:12.123

Last Modified

2024-11-08T20:11:37.567

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Secondary
    CWE-200
    CWE-284
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System dlink dns-320_firmware * Yes
Hardware dlink dns-320 - No
Operating System dlink dns-320lw_firmware * Yes
Hardware dlink dns-320lw - No
Operating System dlink dns-325_firmware * Yes
Hardware dlink dns-325 - No
Operating System dlink dns-340l_firmware * Yes
Hardware dlink dns-340l - No
References