CVE-2024-6044

Certain models of D-Link wireless routers have a path traversal vulnerability. Unauthenticated attackers on the same local area network can read arbitrary system files by manipulating the URL.

Score

CVSS 3.1 6.5 Medium

Status

Deferred - twcert@cert.org.tw

Published

2024-06-17

Last modified

2024-08-01

Weaknesses

CWE-22

Affected products

• E15 (D-link)
• E30 (D-link)
• G403 (D-link)
• G415 (D-link)
• G416 (D-link)
• M18 (D-link)
• M30 (D-link)
• M32 (D-link)
• M60 (D-link)
• R03 (D-link)
• R04 (D-link)
• R12 (D-link)
• R15 (D-link)
• R18 (D-link)
• R32 (D-link)

References

• https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10398
• https://www.twcert.org.tw/en/cp-139-7878-7c3d9-2.html
• https://www.twcert.org.tw/tw/cp-132-7877-b4674-1.html