CVE-2024-57682

MEDIUM EPSS 36.0%

Published Jan 16, 20251y ago · Modified Jun 17, 20261w ago

6.5 CVSS 3.1

Medium

Published Jan 16, 2025 1y ago

Last Modified Jun 17, 2026 1w ago

Description

An information disclosure vulnerability in the component d_status.asp of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to access sensitive information via a crafted POST request.

CVSS Details

Base Score

6.5

Exploitability

2.8

Impact

3.6

Vector string

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector Network

Attack Complexity Low

Privileges Required Low

User Interaction None

Scope Unchanged

Confidentiality High

Integrity None

Availability None

Threat Intelligence

EPSS Exploit Probability

36.0% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-862 Missing Authorization Authorization

Affected Products 2

Vendor	Product	Version	Range
dlink	dir-816_firmware	1.10cnb05_r1b011d88210	any
dlink	dir-816	a2	any

References 2

github.com https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Unauthorized_Vulnerability/D-Link/DIR-816/d_status.md

Broken Link
dlink.com https://www.dlink.com/en/security-bulletin/

Product

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.