Lucene search

K
cvelistTwcertCVELIST:CVE-2024-6044
HistoryJun 17, 2024 - 2:30 a.m.

CVE-2024-6044 D-Link router - Arbitrary File Reading

2024-06-1702:30:04
CWE-22
twcert
www.cve.org
6
d-link
router
vulnerability
unauthenticated
file reading
local network
path traversal

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Certain models of D-Link wireless routers have a path traversal vulnerability. Unauthenticated attackers on the same local area network can read arbitrary system files by manipulating the URL.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "G403",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.01",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "G415",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.01",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "G416",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.01",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "M18",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.01",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "R03",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.01",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "R04",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.01",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "R12",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.01",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "R18",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.01",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "E30",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.02",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "M30",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.02",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "M32",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.02",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "M60",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.02",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "R32",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.02",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "E15",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.20.01",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "R15",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.20.01",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Related for CVELIST:CVE-2024-6044