CVE-2024-8461 - D-Link DNS-320 Web Management Interface discovery.cgi information disclosure

Back Back to CVE browser

MEDIUM

D-Link DNS-320 Web Management Interface discovery.cgi information disclosure

Published Sep 5, 2024

6.9

MEDIUM

CVSS 4.0

EPSS 1.85%

Description

A vulnerability, which was classified as problematic, was found in D-Link DNS-320 2.02b01. This affects an unknown part of the file /cgi-bin/discovery.cgi of the component Web Management Interface. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Vendor was contacted early and confirmed that the product is end-of-life. It should be retired and replaced.

Affected products

Vendor D-Link Product DNS-320 Default
n/a
- Version
  2.02b01
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

D-Link

DNS-320

n/a

Version	Status	Constraints
2.02b01	affected	-

Vendor D-Link Product Dns-320 Default
n/a
- Version
  2.02b01
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

D-Link

Dns-320

n/a

Version	Status	Constraints
2.02b01	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (7)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-49195
Advisory
https://github.com/leetsun/IoT-Vuls/tree/main/Dlink-dns320/4
exploitThird Party Advisory
https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383
relatedNot Applicable
https://vuldb.com/?ctiid.276627
signaturepermissions-requiredPermissions Required
https://vuldb.com/?id.276627
vdb-entryThird Party Advisory
https://vuldb.com/?submit.401300
third-party-advisoryThird Party Advisory
https://www.dlink.com/
product

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-49195		Advisory
https://github.com/leetsun/IoT-Vuls/tree/main/Dlink-dns320/4		exploitThird Party Advisory
https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383		relatedNot Applicable
https://vuldb.com/?ctiid.276627		signaturepermissions-requiredPermissions Required
https://vuldb.com/?id.276627		vdb-entryThird Party Advisory
https://vuldb.com/?submit.401300		third-party-advisoryThird Party Advisory
https://www.dlink.com/		product