Riskcovery

CVE-2024-4022

Keenetic KN-1010/KN-1410/KN-1711/KN-1810/KN-1910 Version Data version.js information disclosure

State
Published
Severity
5.3 Medium
Published
Apr 21, 2024
Updated
Aug 1, 2024
Reserved
Apr 20, 2024

Read the record on cve.org

Description

A vulnerability was found in Keenetic KN-1010, KN-1410, KN-1711, KN-1810 and KN-1910 up to 4.1.2.15. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /version.js of the component Version Data Handler. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-261674 is the identifier assigned to this vulnerability. NOTE: The vendor is aware of this issue and plans to fix it by the end of 2024.

Scores

CVSSScoreVectorSource
3.15.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NVulDB
3.05.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NVulDB
2.05.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:NVulDB

Weaknesses

Affected Products

ProductVersions
KN-1010Keenetic
  • 1.6.49Affected
  • 3.5.68Affected
  • 3.7.77Affected
  • 4.0.2.215Affected
  • 4.1.2.14Affected
  • 4.1.2.15Affected
KN-1410Keenetic
  • 1.6.49Affected
  • 3.5.68Affected
  • 3.7.77Affected
  • 4.0.2.215Affected
  • 4.1.2.14Affected
  • 4.1.2.15Affected
KN-1711Keenetic
  • 1.6.49Affected
  • 3.5.68Affected
  • 3.7.77Affected
  • 4.0.2.215Affected
  • 4.1.2.14Affected
  • 4.1.2.15Affected
KN-1810Keenetic
  • 1.6.49Affected
  • 3.5.68Affected
  • 3.7.77Affected
  • 4.0.2.215Affected
  • 4.1.2.14Affected
  • 4.1.2.15Affected
KN-1910Keenetic
  • 1.6.49Affected
  • 3.5.68Affected
  • 3.7.77Affected
  • 4.0.2.215Affected
  • 4.1.2.14Affected
  • 4.1.2.15Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.