Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-1404

A vulnerability was found in Linksys WRT54GL 4.30.18 and classified as problematic. Affected by this issue is some unknown functionality of the file /SysInfo.htm of the component Web Management Interface. The manipulation leads to information disclosure. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-253328. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Published

2024-02-09T23:15:08.243

Last Modified

2024-11-21T08:50:30.790

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

CVSSv2 Vector

AV:A/AC:L/Au:N/C:P/I:N/A:N

Access Vector: ADJACENT_NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: NONE
Availability Impact: NONE

Exploitability Score

6.5

Impact Score

2.9

Weaknesses

Type: Secondary
CWE-200
Type: Primary
NVD-CWE-noinfo

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	linksys	wrt54gl_firmware	4.30.18	Yes
Hardware	linksys	wrt54gl	-	No

References

https://github.com/leetsun/Hints/tree/main/linksys-wrt54gl/1 Third Party Advisory ([email protected])
https://vuldb.com/?ctiid.253328 Permissions Required, VDB Entry ([email protected])
https://vuldb.com/?id.253328 Permissions Required, VDB Entry ([email protected])
https://github.com/leetsun/Hints/tree/main/linksys-wrt54gl/1 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://vuldb.com/?ctiid.253328 Permissions Required, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://vuldb.com/?id.253328 Permissions Required, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)