Skip to content
Fencer Vulns
medium 5.3

CVE-2024-0717 json

D-Link Good Line Router v2 HTTP GET Request devinfo information disclosure

published 2024-01-19 2 y ago modified 2026-06-17 4 mo ago also EUVD-2024-16507

cvss
5.3
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
18.2%
EPSS 18.2% chance of exploitation in 30 days, percentile 97%
public exploits
0
none known

Summary

A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825AC, DIR-825ACF, DIR-825ACG1, DIR-841, DIR-842, DIR-842S, DIR-843, DIR-853, DIR-878, DIR-882, DIR-1210, DIR-1260, DIR-2150, DIR-X1530, DIR-X1860, DSL-224, DSL-245GR, DSL-2640U, DSL-2750U, DSL-G2452GR, DVG-5402G, DVG-5402G, DVG-5402GFRU, DVG-N5402G, DVG-N5402G-IL, DWM-312W, DWM-321, DWR-921, DWR-953 and Good Line Router v2 up to 20240112. This vulnerability affects unknown code of the file /devinfo of the component HTTP GET Request Handler. The manipulation of the argument area with the input notice|net|version leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-251542 is the identifier assigned to this vulnerability.

CISA SSVC

Exploitation
Proof of concept is public
Automatable
yes
Technical impact
partial
Assessed
18 mo ago

Exploit prediction

18.20% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • github.com https://github.com/999zzzzz/D-Link referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CNA 3.1 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CNA 3.0 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CNA 2.0 5.0 AV:N/AC:L/Au:N/C:P/I:N/A:N
NVD 3.1 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

  • D-Link DAP-1360
  • D-Link DIR-300
  • D-Link DIR-615
  • D-Link DIR-615GF
  • D-Link DIR-615S
  • D-Link DIR-615T
  • D-Link DIR-620
  • D-Link DIR-620S
  • D-Link DIR-806A
  • D-Link DIR-815
  • D-Link DIR-815AC
  • D-Link DIR-815S
  • D-Link DIR-816
  • D-Link DIR-820
  • D-Link DIR-822
  • D-Link DIR-825
  • D-Link DIR-825AC
  • D-Link DIR-825ACF
  • D-Link DIR-825ACG1
  • D-Link DIR-841
  • D-Link DIR-842
  • D-Link DIR-842S
  • D-Link DIR-843
  • D-Link DIR-853
  • D-Link DIR-878
  • D-Link DIR-882
  • D-Link DIR-1210
  • D-Link DIR-1260
  • D-Link DIR-2150
  • D-Link DIR-X1530
  • D-Link DIR-X1860
  • D-Link DSL-224
  • D-Link DSL-245GR
  • D-Link DSL-2640U
  • D-Link DSL-2750U
  • D-Link DSL-G2452GR
  • D-Link DVG-5402G
  • D-Link DVG-5402GFRU
  • D-Link DVG-N5402G
  • D-Link DVG-N5402G-IL
  • D-Link DWM-312W
  • D-Link DWM-321
  • D-Link DWR-921
  • D-Link DWR-953
  • D-Link Good Line Router v2

Classification

Weakness
  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.