CVE-2024-0717

D-Link Good Line Router v2 HTTP GET Request devinfo information disclosure

Medium5.3EPSS 18.2%

Published: 19 Jan 2024
Updated: 30 May 2025
Reserved: 19 Jan 2024
Assigned by: VulDB

Description

A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825AC, DIR-825ACF, DIR-825ACG1, DIR-841, DIR-842, DIR-842S, DIR-843, DIR-853, DIR-878, DIR-882, DIR-1210, DIR-1260, DIR-2150, DIR-X1530, DIR-X1860, DSL-224, DSL-245GR, DSL-2640U, DSL-2750U, DSL-G2452GR, DVG-5402G, DVG-5402G, DVG-5402GFRU, DVG-N5402G, DVG-N5402G-IL, DWM-312W, DWM-321, DWR-921, DWR-953 and Good Line Router v2 up to 20240112. This vulnerability affects unknown code of the file /devinfo of the component HTTP GET Request Handler. The manipulation of the argument area with the input notice|net|version leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-251542 is the identifier assigned to this vulnerability.

Scores

CVSS scores of CVE-2024-0717, by who scored it
Scored by	CVSS	Score	Vector
VulDBCNA (assigner)	3.1	Medium5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
VulDBCNA (assigner)	3.0	Medium5.3	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
VulDBCNA (assigner)	2.0	Medium5.0	AV:N/AC:L/Au:N/C:P/I:N/A:N
NVDNVD · Modified	3.1	Medium5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS (exploitation in 30 days): 18.2% · top 2.8% of all CVEs (6 Nov 2026)
CISA SSVC: Exploitation: poc · Automatable: yes · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.3.

Weakness

CWE-200 Information Disclosure (opens in a new tab)All about CWE-200 and its CVEs

Affected products

D-Link · DAP-1360
- affected 20240112
D-Link · DIR-300
- affected 20240112
D-Link · DIR-615
- affected 20240112
D-Link · DIR-615GF
- affected 20240112
D-Link · DIR-615S
- affected 20240112
D-Link · DIR-615T
- affected 20240112
D-Link · DIR-620
- affected 20240112
D-Link · DIR-620S
- affected 20240112
D-Link · DIR-806A
- affected 20240112
D-Link · DIR-815
- affected 20240112
D-Link · DIR-815AC
- affected 20240112
D-Link · DIR-815S
- affected 20240112
D-Link · DIR-816
- affected 20240112
D-Link · DIR-820
- affected 20240112
D-Link · DIR-822
- affected 20240112
D-Link · DIR-825
- affected 20240112
D-Link · DIR-825AC
- affected 20240112
D-Link · DIR-825ACF
- affected 20240112
D-Link · DIR-825ACG1
- affected 20240112
D-Link · DIR-841
- affected 20240112
D-Link · DIR-842
- affected 20240112
D-Link · DIR-842S
- affected 20240112
D-Link · DIR-843
- affected 20240112
D-Link · DIR-853
- affected 20240112
D-Link · DIR-878
- affected 20240112
D-Link · DIR-882
- affected 20240112
D-Link · DIR-1210
- affected 20240112
D-Link · DIR-1260
- affected 20240112
D-Link · DIR-2150
- affected 20240112
D-Link · DIR-X1530
- affected 20240112
D-Link · DIR-X1860
- affected 20240112
D-Link · DSL-224
- affected 20240112
D-Link · DSL-245GR
- affected 20240112
D-Link · DSL-2640U
- affected 20240112
D-Link · DSL-2750U
- affected 20240112
D-Link · DSL-G2452GR
- affected 20240112
D-Link · DVG-5402G
- affected 20240112
D-Link · DVG-5402G
- affected 20240112
D-Link · DVG-5402GFRU
- affected 20240112
D-Link · DVG-N5402G
- affected 20240112
D-Link · DVG-N5402G-IL
- affected 20240112
D-Link · DWM-312W
- affected 20240112
D-Link · DWM-321
- affected 20240112
D-Link · DWR-921
- affected 20240112
D-Link · DWR-953
- affected 20240112
D-Link · Good Line Router v2
- affected 20240112

References (3)

https://vuldb.com/?id.251542 (opens in a new tab)vdb-entrytechnical-descriptionx_transferred
https://vuldb.com/?ctiid.251542 (opens in a new tab)signaturepermissions-requiredx_transferred
https://github.com/999zzzzz/D-Link (opens in a new tab)exploitx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2024-0717](https://trackcve.app/badge/CVE-2024-0717.svg)](https://trackcve.app/cve/CVE-2024-0717)

Record last updated 30 May 2025, 14:26 UTC.