VULNERABILITY INTELLIGENCE

CVE-2024-10916

CVSS score5.3 MEDIUM
EPSS probability1.50%
CISA KEVNot currently listed
Published2024-11-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

A vulnerability classified as problematic has been found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. This affects an unknown part of the file /xml/info.xml of the component HTTP GET Request Handler. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Weakness classification

  • cna@vuldb.com: CWE-200
  • nvd@nist.gov: NVD-CWE-Other

Primary references