CVE-2024-6044

published 2024-06-17

CVE-2024-6044: Certain models of D-Link wireless routers have a path traversal vulnerability. Unauthenticated attackers on the same local area network can read arbitrary…

Priority P3 36 medium 6.5 CVSS 3.1

AV A AC L PR N UI N S U C H I N A N

Certain models of D-Link wireless routers have a path traversal vulnerability. Unauthenticated attackers on the same local area network can read arbitrary system files by manipulating the URL.

Affected

15 ranges

Vendor	Product	Version range	Fixed in
d-link	e15	>= earlier < 1.20.01	1.20.01
d-link	e30	>= earlier < 1.10.02	1.10.02
d-link	g403	>= earlier < 1.10.01	1.10.01
d-link	g415	>= earlier < 1.10.01	1.10.01
d-link	g416	>= earlier < 1.10.01	1.10.01
d-link	m18	>= earlier < 1.10.01	1.10.01
d-link	m30	>= earlier < 1.10.02	1.10.02
d-link	m32	>= earlier < 1.10.02	1.10.02
d-link	m60	>= earlier < 1.10.02	1.10.02
d-link	r03	>= earlier < 1.10.01	1.10.01
d-link	r04	>= earlier < 1.10.01	1.10.01
d-link	r12	>= earlier < 1.10.01	1.10.01
d-link	r15	>= earlier < 1.20.01	1.20.01
d-link	r18	>= earlier < 1.10.01	1.10.01
d-link	r32	>= earlier < 1.10.02	1.10.02

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-22