CVE-2024-33113

MEDIUMNuclei

D-LINK DIR-845L bsc_sms_inbox.php file - Information Disclosure

Title source: github.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2024-33113 has a selected CVSS score of 5.3 (medium); EIP currently links 2 repository PoCs and 1 Nuclei template.

Description

D-LINK DIR-845L <=v1.01KRb03 is vulnerable to Information disclosurey via bsc_sms_inbox.php.

Description source: CVE List

Exploitation context

Available material

Repository PoCs
2
Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated May 7, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

dir-845l

Browse d-link / dir-845l

Default status: unknown

CVE List-affected

Proofs of concept

2

Repository PoCs

GitHubFaLLenSKiLL1/CVE-2024-33113Repository PoCby FaLLenSKiLL14Not analyzed2 files

1.8 KiB

GitHub
PoC details
GitHubtekua/CVE-2024-33113Repository PoCby tekua0Not analyzed1 file

734 B

GitHub
PoC details

Nuclei templates

1
ProjectDiscoveryMEDIUMD-LINK DIR-845L bsc_sms_inbox.php file - Information Disclosure

D-LINK DIR-845L <=v1.01KRb03 is vulnerable to Information disclosurey via bsc_sms_inbox.php.

Impact

Unauthenticated attackers can access sensitive account and configuration information from the D-LINK DIR-845L router.

Remediation

Update D-LINK DIR-845L firmware to a version later than 1.01KRb03 that patches the information disclosure vulnerability.

Authorspussycat0x
Template tagscvecve2024dlinkinfo-leakvuln
CPE: cpe:2.3:h:dlink:dir-845l:*:*:*:*:*:*:*:*
Shodan: DIR-845L
https://github.com/FaLLenSKiLL1/CVE-2024-33113 https://github.com/yj94/Yj_learning/blob/main/Week16/D-LINK-POC.md

Source: ProjectDiscovery

References

2