| Titre | D-Link DI-7003GV2 24.04.18D1 R(68125) Exposure of Sensitive System Information to an Unauthorized Cont |
|---|
| Description | The D-Link DI-7003GV2 device exposes sensitive system and network information through the unauthenticated /H5/state_view.data HTTP endpoint. An attacker on the same network can send a crafted GET request to retrieve critical details, including device model, LAN and WAN IP addresses, MAC addresses, CPU specifications, and interface link states. |
|---|
| La source | ⚠️ https://github.com/at0de/my_vulns/blob/main/Dlink/Di-7003GV2/state_view.md |
|---|
| Utilisateur | 153528990 (UID 64409) |
|---|
| Soumission | 15/05/2025 13:15 (il y a 11 mois) |
|---|
| Modérer | 17/05/2025 15:06 (2 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 309457 [D-Link DI-7003GV2 24.04.18D1 R(68125) HTTP Endpoint /H5/state_view.data sub_41E304 divulgation d'information] |
|---|
| Points | 19 |
|---|