| tiêu đề | D-LINK DNS-327L, DNS-320L, DNS-320LW Version=1.02.0329.2013, Version=1.01.0914.2012, Version=1.01.0914.2012, Version=1.00.0409.2013 Exposure of Sensitive Information to an Unauthorized Actor |
|---|
| Mô tả | A vulnerability has been identified in the D-Link DNS series network storage devices, allowing for the exposure of sensitive device information to unauthorized actors. This vulnerability is due to an unauthenticated access flaw in the info.cgi script, which can be exploited via a simple HTTP GET request, affecting over 920,000 devices on the Internet. |
|---|
| Nguồn | ⚠️ https://github.com/netsecfish/info_cgi |
|---|
| Người dùng | netsecfish (UID 64568) |
|---|
| Đệ trình | 26/03/2024 14:20 (cách đây 3 những năm) |
|---|
| Kiểm duyệt | 03/04/2024 20:23 (8 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 259285 [D-Link DNS-320L/DNS-320LW/DNS-327L đến 20240403 HTTP GET Request /cgi-bin/info.cgi tiết lộ thông tin] |
|---|
| điểm | 18 |
|---|