CVE-2024-0717

D-Link Good Line Router v2 HTTP GET Request devinfo information disclosure

State: Published
Severity: 5.3 Medium
Published: Jan 19, 2024
Updated: May 30, 2025
Reserved: Jan 19, 2024

Description

A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825AC, DIR-825ACF, DIR-825ACG1, DIR-841, DIR-842, DIR-842S, DIR-843, DIR-853, DIR-878, DIR-882, DIR-1210, DIR-1260, DIR-2150, DIR-X1530, DIR-X1860, DSL-224, DSL-245GR, DSL-2640U, DSL-2750U, DSL-G2452GR, DVG-5402G, DVG-5402G, DVG-5402GFRU, DVG-N5402G, DVG-N5402G-IL, DWM-312W, DWM-321, DWR-921, DWR-953 and Good Line Router v2 up to 20240112. This vulnerability affects unknown code of the file /devinfo of the component HTTP GET Request Handler. The manipulation of the argument area with the input notice|net|version leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-251542 is the identifier assigned to this vulnerability.

Scores

CVSS	Score	Vector	Source
3.1	5.3 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	VulDB
3.0	5.3 Medium	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	VulDB
2.0	5.0 Medium	AV:N/AC:L/Au:N/C:P/I:N/A:N	VulDB

Weaknesses

CWE-200 Information Disclosure

Affected Products

Product	Versions
DAP-1360D-Link	20240112Affected
DIR-300D-Link	20240112Affected
DIR-615D-Link	20240112Affected
DIR-615GFD-Link	20240112Affected
DIR-615SD-Link	20240112Affected
DIR-615TD-Link	20240112Affected
DIR-620D-Link	20240112Affected
DIR-620SD-Link	20240112Affected
DIR-806AD-Link	20240112Affected
DIR-815D-Link	20240112Affected
DIR-815ACD-Link	20240112Affected
DIR-815SD-Link	20240112Affected
DIR-816D-Link	20240112Affected
DIR-820D-Link	20240112Affected
DIR-822D-Link	20240112Affected
DIR-825D-Link	20240112Affected
DIR-825ACD-Link	20240112Affected
DIR-825ACFD-Link	20240112Affected
DIR-825ACG1D-Link	20240112Affected
DIR-841D-Link	20240112Affected
DIR-842D-Link	20240112Affected
DIR-842SD-Link	20240112Affected
DIR-843D-Link	20240112Affected
DIR-853D-Link	20240112Affected
DIR-878D-Link	20240112Affected
DIR-882D-Link	20240112Affected
DIR-1210D-Link	20240112Affected
DIR-1260D-Link	20240112Affected
DIR-2150D-Link	20240112Affected
DIR-X1530D-Link	20240112Affected
DIR-X1860D-Link	20240112Affected
DSL-224D-Link	20240112Affected
DSL-245GRD-Link	20240112Affected
DSL-2640UD-Link	20240112Affected
DSL-2750UD-Link	20240112Affected
DSL-G2452GRD-Link	20240112Affected
DVG-5402GD-Link	20240112Affected
DVG-5402GD-Link	20240112Affected
DVG-5402GFRUD-Link	20240112Affected
DVG-N5402GD-Link	20240112Affected
DVG-N5402G-ILD-Link	20240112Affected
DWM-312WD-Link	20240112Affected
DWM-321D-Link	20240112Affected
DWR-921D-Link	20240112Affected
DWR-953D-Link	20240112Affected
Good Line Router v2D-Link	20240112Affected

References

https://vuldb.com/?id.251542vdb-entrytechnical-description
https://vuldb.com/?ctiid.251542signaturepermissions-required
https://github.com/999zzzzz/D-Linkexploit

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.