github.comexploit
https://github.com/netsecfish/info_cgi CVE-2024-3274
MEDIUMNuclei
D-Link DNS-320L/DNS-320LW/DNS-327L HTTP GET Request info.cgi information disclosure
Record summary
CVE-2024-3274 has a selected CVSS score of 5.3 (medium); EIP currently links 1 Nuclei template.
Description
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DNS-320L, DNS-320LW and DNS-327L up to 20240403 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/info.cgi of the component HTTP GET Request Handler. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259285 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.
Description source: CVE List
Exploitation context
Available material
- Nuclei templates
- 1
CISA SSVC decision
ExploitationNone
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 4, 2024 · Source: CVE List
Affected products and versions
3| Product | Source | Version range | Status |
|---|---|---|---|
DNS-320LBrowse D-Link / DNS-320LDefault status: unknown | CVE List | 20240403 | affected |
DNS-320LWBrowse D-Link / DNS-320LWDefault status: unknown | CVE List | 20240403 | affected |
DNS-327LBrowse D-Link / DNS-327LDefault status: unknown | CVE List | 20240403 | affected |
Nuclei templates
1ProjectDiscoveryMEDIUMD-LINK DNS-320L,DNS-320LW and DNS-327L - Information DisclosureCVSS 5.3
A vulnerability has been found in D-Link DNS-320L, DNS-320LW and DNS-327L up to 20240403 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/info.cgi of the component HTTP GET Request Handler.
Impact
Unauthenticated attackers can access sensitive system information from D-Link NAS devices.
Remediation
Update D-Link NAS firmware to a version that patches the information disclosure vulnerability.
WeaknessesCWE-200
AuthorsDhiyaneshDk
Template tagscvecve2024dlinkexposurevuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CPE: cpe:2.3:h:dlink:dns-320l:*:*:*:*:*:*:*:*
FOFA: body="Text:In order to access the ShareCenter"
https://github.com/netsecfish/info_cgi https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383 https://nvd.nist.gov/vuln/detail/CVE-2024-3274
Source: ProjectDiscovery
References
6nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-3274 supportannouncement.us.dlink.comrelated
https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383 VDB-259285 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions required
https://vuldb.com/?ctiid.259285 VDB-259285 | D-Link DNS-320L/DNS-320LW/DNS-327L HTTP GET Request info.cgi information disclosurevdb entry
https://vuldb.com/?id.259285 Submit #304706 | D-LINK DNS-327L, DNS-320L, DNS-320LW Version=1.02.0329.2013, Version=1.01.0914.2012, Version=1.01.0914.2012, Version=1.00.0409.2013 Exposure of Sensitive Information to an Unauthorized ActorThird-party advisory
https://vuldb.com/?submit.304706