CVE-2024-0717

A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825AC, DIR-825ACF, DIR-825ACG1, DIR-841, DIR-842, DIR-842S, DIR-843, DIR-853, DIR-878, DIR-882, DIR-1210, DIR-1260, DIR-2150, DIR-X1530, DIR-X1860, DSL-224, DSL-245GR, DSL-2640U, DSL-2750U, DSL-G2452GR, DVG-5402G, DVG-5402G, DVG-5402GFRU, DVG-N5402G, DVG-N5402G-IL, DWM-312W, DWM-321, DWR-921, DWR-953 and Good Line Router v2 up to 20240112. This vulnerability affects unknown code of the file /devinfo of the component HTTP GET Request Handler. The manipulation of the argument area with the input notice|net|version leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-251542 is the identifier assigned to this vulnerability. It has a CVSS v3.1 base score of 5.3 (MEDIUM).

CVE-2024-0717 has a CVSS v3.1 score of 5.3 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.

CVE-2024-0717 affects products from dlink, specifically: dap-1360, dap-1360_firmware, dir-1210, dir-1210_firmware, dir-1260, dir-1260_firmware, dir-2150, dir-2150_firmware, dir-300, dir-300_firmware, dir-615, dir-615_firmware, dir-615gf, dir-615gf_firmware, dir-615s, dir-615s_firmware, dir-615t, dir-615t_firmware, dir-620, dir-620_firmware, dir-620s, dir-620s_firmware, dir-806a, dir-806a_firmware, dir-815, dir-815\/ac, dir-815\/ac_firmware, dir-815_firmware, dir-815s, dir-815s_firmware, dir-816, dir-816_firmware, dir-820, dir-820_firmware, dir-822, dir-822_firmware, dir-825, dir-825_firmware, dir-825ac, dir-825ac_firmware, dir-825acf, dir-825acf_firmware, dir-825acg1, dir-825acg1_firmware, dir-841, dir-841_firmware, dir-842, dir-842_firmware, dir-842s, dir-842s_firmware, dir-843, dir-843_firmware, dir-853, dir-853_firmware, dir-878, dir-878_firmware, dir-882, dir-882_firmware, dir-x1530, dir-x1530_firmware, dir-x1860, dir-x1860_firmware, dsl-224, dsl-224_firmware, dsl-245gr, dsl-245gr_firmware, dsl-2640u, dsl-2640u_firmware, dsl-2750u, dsl-2750u_firmware, dsl-g2452gr, dsl-g2452gr_firmware, dvg-5402g, dvg-5402g\/gfru, dvg-5402g\/gfru_firmware, dvg-5402g_firmware, dvg-n5402g, dvg-n5402g\/il, dvg-n5402g\/il_firmware, dvg-n5402g_firmware, dwm-312w, dwm-312w_firmware, dwm-321, dwm-321_firmware, dwr-921, dwr-921_firmware, dwr-953, dwr-953_firmware. Check the affected products table above for specific version ranges.

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.