Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-6044 EUVD-2024-47202GHSA-rr4p-qrv5-g999

D-Link router - Arbitrary File Reading

Published Jun 17, 2024 · Updated Aug 1, 2024 · Assigned by twcert

Vendor: D-Link Product: E15 Product: E30 Product: G403 Product: G415 Product: G416 Product: M18 Product: M30 Product: M32 Product: M60 Product: R03 Product: R04 Product: R12 Product: R15 Product: R18 Product: R32 Category: Network devices

Description

Certain models of D-Link wireless routers have a path traversal vulnerability. Unauthenticated attackers on the same local area network can read arbitrary system files by manipulating the URL.

Affected products

VendorProductAffectedFixed
D-Link G403 earlier – < 1.10.01 1.10.01
D-Link G415 earlier – < 1.10.01 1.10.01
D-Link G416 earlier – < 1.10.01 1.10.01
D-Link M18 earlier – < 1.10.01 1.10.01
D-Link R03 earlier – < 1.10.01 1.10.01
D-Link R04 earlier – < 1.10.01 1.10.01
D-Link R12 earlier – < 1.10.01 1.10.01
D-Link R18 earlier – < 1.10.01 1.10.01
D-Link E30 earlier – < 1.10.02 1.10.02
D-Link M30 earlier – < 1.10.02 1.10.02
D-Link M32 earlier – < 1.10.02 1.10.02
D-Link M60 earlier – < 1.10.02 1.10.02
D-Link R32 earlier – < 1.10.02 1.10.02
D-Link E15 earlier – < 1.20.01 1.20.01
D-Link R15 earlier – < 1.20.01 1.20.01

Advisories 1

References