CVE-2024-8460 — Sensitive Information Exposure in D-link Dns-320

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
6.3MEDIUMNVD
EPSS
2.1%
top 16.07%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
D-link Dns-320Dlink Dns-320 Firmware
Timeline
PublishedSep 5

Description

A vulnerability, which was classified as problematic, has been found in D-Link DNS-320 2.02b01. Affected by this issue is some unknown functionality of the file /cgi-bin/widget_api.cgi of the component Web Management Interface. The manipulation of the argument getHD/getSer/getSys leads to information disclosure. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. …

CVSS vector

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5d-link/dns-3202.02b01

🔴Vulnerability Details

2
CVEList
D-Link DNS-320 Web Management Interface widget_api.cgi information disclosure↗2024-09-05
▶
GHSA
GHSA-vw6v-cq5v-cf7f: A vulnerability, which was classified as problematic, has been found in D-Link DNS-320 2↗2024-09-05
▶
CVE-2024-8460 — Sensitive Information Exposure | cvebase