Login Request a demo
Medium severity · published Apr 4, 2024
CVE-2024-3274
D-Link DNS-320L/DNS-320LW/DNS-327L HTTP GET Request info.cgi information disclosure
5.3
CVSS
33.5%
EPSS
No
On KEV
Description
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DNS-320L, DNS-320LW and DNS-327L up to 20240403 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/info.cgi of the component HTTP GET Request Handler. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259285 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)33.5% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DN
DNS-320L · D-Link
20240403 · source: vendor, CISA
DN
DNS-320LW · D-Link
20240403 · source: vendor, CISA
DN
DNS-327L · D-Link
20240403 · source: vendor, CISA
Affected product
DN
DNS-320L
D-Link
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-3274
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-3274
github.com
https://github.com/netsecfish/info_cgi
supportannouncement.us.dlink.com
https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383
vuldb.com
https://vuldb.com/?ctiid.259285
vuldb.com
https://vuldb.com/?id.259285
vuldb.com
https://vuldb.com/?submit.304706
More from DNS-320L
9.8
CVE-2024-3273
D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection
9.8
CVE-2024-3272
D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials
9.9
CVE-2026-82689
D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 ISO Image isomount_mgr.cgi os command injection
9.8
CVE-2026-4214
D-Link DNS-1550-04 app_mgr.cgi UPnP_AV_Server_Path_Setting stack-based overflow
9.8
CVE-2026-4213
D-Link DNS-1550-04 gui_mgr.cgi cgi_myfavorite_verify stack-based overflow