CVE-2024-4021
Estado: AplazadaMedia (5.3)—
A vulnerability was found in Keenetic KN-1010, KN-1410, KN-1711, KN-1810 and KN-1910 up to 4.1.2.15. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /ndmComponents.js of the component Configuration Setting Handler. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-261673 was assigned to this vulnerability. NOTE: The vendor is aware of this issue and plans to fix it by the end of 2024.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Puntuación base: 5.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.57%
- Percentil entre todas las CVEs puntuadas: 46
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (5)
⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.
CWE
- CWE-200
Referencias
- https://netsecfish.notion.site/Information-Disclosure-in-Keenetic-Router-d4a12a499cef4acf80e191bdaf20c151?pvs=4
- https://vuldb.com/?ctiid.261673
- https://vuldb.com/?id.261673
- https://netsecfish.notion.site/Information-Disclosure-in-Keenetic-Router-d4a12a499cef4acf80e191bdaf20c151?pvs=4
- https://vuldb.com/?ctiid.261673
- https://vuldb.com/?id.261673
JSON original (NVD)
Mostrar
{
"id": "CVE-2024-4021",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2024-4021",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2024-07-30T17:33:15.337526Z"
}
}
],
"cvssMetricV2": [
{
"type": "Secondary",
"source": "cna@vuldb.com",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "cna@vuldb.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 5.3,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "LOW"
},
"impactScore": 1.4,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "cna@vuldb.com",
"affectedData": [
{
"vendor": "Keenetic",
"modules": [
"Configuration Setting Handler"
],
"product": "KN-1010",
"versions": [
{
"status": "affected",
"version": "1.6.49"
},
{
"status": "affected",
"version": "3.5.68"
},
{
"status": "affected",
"version": "3.7.77"
},
{
"status": "affected",
"version": "4.0.2.215"
},
{
"status": "affected",
"version": "4.1.2.14"
},
{
"status": "affected",
"version": "4.1.2.15"
}
]
},
{
"vendor": "Keenetic",
"modules": [
"Configuration Setting Handler"
],
"product": "KN-1410",
"versions": [
{
"status": "affected",
"version": "1.6.49"
},
{
"status": "affected",
"version": "3.5.68"
},
{
"status": "affected",
"version": "3.7.77"
},
{
"status": "affected",
"version": "4.0.2.215"
},
{
"status": "affected",
"version": "4.1.2.14"
},
{
"status": "affected",
"version": "4.1.2.15"
}
]
},
{
"vendor": "Keenetic",
"modules": [
"Configuration Setting Handler"
],
"product": "KN-1711",
"versions": [
{
"status": "affected",
"version": "1.6.49"
},
{
"status": "affected",
"version": "3.5.68"
},
{
"status": "affected",
"version": "3.7.77"
},
{
"status": "affected",
"version": "4.0.2.215"
},
{
"status": "affected",
"version": "4.1.2.14"
},
{
"status": "affected",
"version": "4.1.2.15"
}
]
},
{
"vendor": "Keenetic",
"modules": [
"Configuration Setting Handler"
],
"product": "KN-1810",
"versions": [
{
"status": "affected",
"version": "1.6.49"
},
{
"status": "affected",
"version": "3.5.68"
},
{
"status": "affected",
"version": "3.7.77"
},
{
"status": "affected",
"version": "4.0.2.215"
},
{
"status": "affected",
"version": "4.1.2.14"
},
{
"status": "affected",
"version": "4.1.2.15"
}
]
},
{
"vendor": "Keenetic",
"modules": [
"Configuration Setting Handler"
],
"product": "KN-1910",
"versions": [
{
"status": "affected",
"version": "1.6.49"
},
{
"status": "affected",
"version": "3.5.68"
},
{
"status": "affected",
"version": "3.7.77"
},
{
"status": "affected",
"version": "4.0.2.215"
},
{
"status": "affected",
"version": "4.1.2.14"
},
{
"status": "affected",
"version": "4.1.2.15"
}
]
}
]
}
],
"published": "2024-04-21T10:15:06.963",
"references": [
{
"url": "https://netsecfish.notion.site/Information-Disclosure-in-Keenetic-Router-d4a12a499cef4acf80e191bdaf20c151?pvs=4",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?ctiid.261673",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?id.261673",
"source": "cna@vuldb.com"
},
{
"url": "https://netsecfish.notion.site/Information-Disclosure-in-Keenetic-Router-d4a12a499cef4acf80e191bdaf20c151?pvs=4",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://vuldb.com/?ctiid.261673",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://vuldb.com/?id.261673",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Deferred",
"weaknesses": [
{
"type": "Secondary",
"source": "cna@vuldb.com",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in Keenetic KN-1010, KN-1410, KN-1711, KN-1810 and KN-1910 up to 4.1.2.15. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /ndmComponents.js of the component Configuration Setting Handler. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-261673 was assigned to this vulnerability. NOTE: The vendor is aware of this issue and plans to fix it by the end of 2024."
},
{
"lang": "es",
"value": "Se encontró una vulnerabilidad en Keenetic KN-1010, KN-1410, KN-1711, KN-1810 y KN-1910 hasta 4.1.2.15. Ha sido declarada problemática. Una función desconocida del archivo /ndmComponents.js del componente Configuration Settings Handler es afectada por esta vulnerabilidad. La manipulación conduce a la divulgación de información. El ataque se puede lanzar de forma remota. El exploit ha sido divulgado al público y puede utilizarse. A esta vulnerabilidad se le asignó el identificador VDB-261673. NOTA: Se contactó primeramente con el proveedor sobre esta divulgación, pero no respondió de ninguna manera."
}
],
"lastModified": "2026-06-17T08:00:57.080",
"sourceIdentifier": "cna@vuldb.com"
}