Fiche vulnérabilité
CVE-2024-10916 : faille moyenne dlink dns-320 firmware (CVSS 5.3)
Description
A vulnerability classified as problematic has been found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. This affects an unknown part of the file /xml/info.xml of the component HTTP GET Request Handler. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
En bref
- Sévérité
- Moyenne (CVSS 5.3)
- Vecteur CVSS
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Exploitation active
- Non signalée par la CISA
- Publication
- 6 nov. 2024
- Dernière mise à jour
- 17 juin 2026
Produits concernés
- dlink dns-320 firmware
- dlink dns-320lw firmware
- dlink dns-325 firmware
- dlink dns-340l firmware