| 제목 | D-Link DNS-320, DNS-320LW, DNS-325, DNS-340L Version 1.00, Version 1.01.0914.2012, Version 1.01, Version 1.02, Version 1.08 Information Disclosure |
|---|
| 설명 | An information disclosure vulnerability has been identified in the /xml/info.xml URI accessible through D-Link NAS devices. This vulnerability, affecting over 61,000 devices on the Internet, allows unauthorized access to sensitive device information without authentication, which could be exploited by an attacker to gain insight into device specifics that could facilitate further attacks.
|
|---|
| 원천 | ⚠️ https://netsecfish.notion.site/Information-Disclosure-Vulnerability-Report-in-xml-info-xml-for-D-Link-NAS-12d6b683e67c8019a311e699582f51b6?pvs=4 |
|---|
| 사용자 | netsecfish (UID 64568) |
|---|
| 제출 | 2024. 10. 28. PM 02:26 (2 연령 ago) |
|---|
| 모더레이션 | 2024. 11. 06. AM 08:08 (9 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 283311 [D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L 까지 20241028 HTTP GET Request /xml/info.xml 정보 공개] |
|---|
| 포인트들 | 16 |
|---|