CVE-2024-0717

Published: Jan 19, 2024Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825AC, DIR-825ACF, DIR-825ACG1, DIR-841, DIR-842, DIR-842S, DIR-843, DIR-853, DIR-878, DIR-882, DIR-1210, DIR-1260, DIR-2150, DIR-X1530, DIR-X1860, DSL-224, DSL-245GR, DSL-2640U, DSL-2750U, DSL-G2452GR, DVG-5402G, DVG-5402G, DVG-5402GFRU, DVG-N5402G, DVG-N5402G-IL, DWM-312W, DWM-321, DWR-921, DWR-953 and Good Line Router v2 up to 20240112. This vulnerability affects unknown code of the file /devinfo of the component HTTP GET Request Handler. The manipulation of the argument area with the input notice|net|version leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-251542 is the identifier assigned to this vulnerability.

Affected (44)

Products: Dlink: Dir 825acg1 Firmware, Dir 841 Firmware, Dir 1260 Firmware, Dir 822 Firmware, Dir X1530 Firmware, Dir 825 Firmware, Dir 615 Firmware, Dir 842 Firmware, Dir 853 Firmware, Dir 1210 Firmware, Dir 806a Firmware, Dir 815 Firmware, Dsl 245gr Firmware, Dsl G2452gr Firmware, Dir 878 Firmware, Dir 825acf Firmware, Dir 615t Firmware, Dir 300 Firmware, Dir 842s Firmware, Dir 815s Firmware, Dsl 2640u Firmware, Dir 2150 Firmware, Dwr 921 Firmware, Dir 615s Firmware, Dir 620 Firmware, Dvg 5402g Firmware, Dir 882 Firmware, Dwm 312w Firmware, Dir 815/ac Firmware, Dsl 224 Firmware, Dwm 321 Firmware, Dir X1860 Firmware, Dap 1360 Firmware, Dir 820 Firmware, Dir 843 Firmware, Dvg 5402g/gfru Firmware, Dwr 953 Firmware, Dvg N5402g/il Firmware, Dir 825ac Firmware, Dir 620s Firmware, Dvg N5402g Firmware, Dsl 2750u Firmware, Dir 615gf Firmware, Dir 816 Firmware

44 products

Dvg 5402g/gfru Firmware

Dwr 953 Firmware

Dvg N5402g/il Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 825acg1 Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dir 825acg1	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 841 Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dir 841	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 1260 Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dir 1260	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 822 Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dir 822	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir X1530 Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dir X1530	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 825 Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dir 825	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 615 Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dir 615	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 842 Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dir 842	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 853 Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dir 853	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 1210 Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dir 1210	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 806a Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dir 806a	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 815 Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dir 815	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dsl 245gr Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dsl 245gr	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dsl G2452gr Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dsl G2452gr	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 878 Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dir 878	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 825acf Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dir 825acf	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 615t Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dir 615t	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 300 Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dir 300	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 842s Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dir 842s	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 815s Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dir 815s	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dsl 2640u Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dsl 2640u	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 2150 Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dir 2150	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dwr 921 Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dwr 921	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 615s Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dir 615s	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 620 Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dir 620	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dvg 5402g Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dvg 5402g	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 882 Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dir 882	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dwm 312w Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dwm 312w	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 815/ac Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dir 815/ac	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dsl 224 Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dsl 224	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dwm 321 Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dwm 321	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir X1860 Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dir X1860	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dap 1360 Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dap 1360	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 820 Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dir 820	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 843 Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dir 843	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dvg 5402g/gfru Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dvg 5402g/gfru	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dwr 953 Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dwr 953	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dvg N5402g/il Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dvg N5402g/il	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 825ac Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dir 825ac	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 620s Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dir 620s	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dvg N5402g Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dvg N5402g	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dsl 2750u Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dsl 2750u	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 615gf Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dir 615gf	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 816 Firmware	Up to 2024-01-12

Running on/with	Platform Versions
Dlink Dir 816	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (6)

https://github.com/999zzzzz/D-Link

Source: cna@vuldb.com

ExploitThird Party Advisory

https://vuldb.com/?ctiid.251542

Source: cna@vuldb.com

Third Party Advisory

https://vuldb.com/?id.251542

Source: cna@vuldb.com

Third Party Advisory

https://github.com/999zzzzz/D-Link

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://vuldb.com/?ctiid.251542

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://vuldb.com/?id.251542

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.