D-Link Good Line Router v2 HTTP GET Request devinfo information disclosure (D-Link DAP-1360)

CVE-2024-0717

MEDIUM 5.3

At a glance

Source: NVD
EPSS: EPSS 18.20 % · percentile 97 (2026-10-30)
State: PUBLISHED
Published: 2024-01-19 15:31 UTC
Updated: 2025-05-30 14:26 UTC
Assigner: VulDB
NVD status: Modified

Search on…

Description

A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825AC, DIR-825ACF, DIR-825ACG1, DIR-841, DIR-842, DIR-842S, DIR-843, DIR-853, DIR-878, DIR-882, DIR-1210, DIR-1260, DIR-2150, DIR-X1530, DIR-X1860, DSL-224, DSL-245GR, DSL-2640U, DSL-2750U, DSL-G2452GR, DVG-5402G, DVG-5402G, DVG-5402GFRU, DVG-N5402G, DVG-N5402G-IL, DWM-312W, DWM-321, DWR-921, DWR-953 and Good Line Router v2 up to 20240112. This vulnerability affects unknown code of the file /devinfo of the component HTTP GET Request Handler. The manipulation of the argument area with the input notice|net|version leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-251542 is the identifier assigned to this vulnerability.

Weaknesses (CWE)

CWE-200 — Exposure of Sensitive Information to an Unauthorized Actor

References

Scores

Version	Score	Vector	Scored by
CVSS 3.1	MEDIUM 5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	VulDB
CVSS 3.0	MEDIUM 5.3	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	VulDB
CVSS 2.0	MEDIUM 5.0	AV:N/AC:L/Au:N/C:P/I:N/A:N	VulDB
CVSS 3.1	MEDIUM 5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	NVD · cna@vuldb.com (Secondary)
CVSS 3.1	MEDIUM 5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	NVD · nvd@nist.gov (Primary)
CVSS 2.0	MEDIUM 5.0	AV:N/AC:L/Au:N/C:P/I:N/A:N	NVD · cna@vuldb.com (Secondary)

European references

ENISA EUVD · EUVD-2024-16507
GCVE · GCVE-0-2024-0717

Affected configurations (NVD CPE)

cpe:2.3:o:dlink:dir-825acg1_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dir-841_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dir-1260_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dir-822_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dir-x1530_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dir-825_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dir-615_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dir-842_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dir-853_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dir-1210_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dir-806a_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dir-815_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dsl-245gr_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dsl-g2452gr_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dir-878_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dir-825acf_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dir-615t_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dir-300_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dir-842s_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dir-815s_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dsl-2640u_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dir-2150_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dwr-921_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dir-615s_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dir-620_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dvg-5402g_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dir-882_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dwm-312w_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dir-815\/ac_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dsl-224_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dwm-321_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dir-x1860_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dap-1360_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dir-820_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dir-843_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dvg-5402g\/gfru_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dwr-953_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dvg-n5402g\/il_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dir-825ac_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
cpe:2.3:o:dlink:dir-620s_firmware:*:*:*:*:*:*:*:* ≤ 2024-01-12
+4 more

Affected products

Product	Versions
D-Link · DAP-1360	affected 20240112
D-Link · DIR-300	affected 20240112
D-Link · DIR-615	affected 20240112
D-Link · DIR-615GF	affected 20240112
D-Link · DIR-615S	affected 20240112
D-Link · DIR-615T	affected 20240112
D-Link · DIR-620	affected 20240112
D-Link · DIR-620S	affected 20240112
D-Link · DIR-806A	affected 20240112
D-Link · DIR-815	affected 20240112
D-Link · DIR-815AC	affected 20240112
D-Link · DIR-815S	affected 20240112
D-Link · DIR-816	affected 20240112
D-Link · DIR-820	affected 20240112
D-Link · DIR-822	affected 20240112
D-Link · DIR-825	affected 20240112
D-Link · DIR-825AC	affected 20240112
D-Link · DIR-825ACF	affected 20240112
D-Link · DIR-825ACG1	affected 20240112
D-Link · DIR-841	affected 20240112

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD

🟡 D-Link Good Line Router v2 HTTP GET Request devinfo information disclosure (D-Link DAP-1360)