« Volver al listado

CVE-2024-6044

Estado: AplazadaMedia (6.5)—

Certain models of D-Link wireless routers have a path traversal vulnerability. Unauthenticated attackers on the same local area network can read arbitrary system files by manipulating the URL.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Dlink — Wireless RouterAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-6044",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-6044",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-06-18T14:25:27.426937Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "twcert@cert.org.tw",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "twcert@cert.org.tw",
      "affectedData": [
        {
          "vendor": "D-Link",
          "product": "G403",
          "versions": [
            {
              "status": "affected",
              "version": "earlier",
              "lessThan": "1.10.01",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "D-Link",
          "product": "G415",
          "versions": [
            {
              "status": "affected",
              "version": "earlier",
              "lessThan": "1.10.01",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "D-Link",
          "product": "G416",
          "versions": [
            {
              "status": "affected",
              "version": "earlier",
              "lessThan": "1.10.01",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "D-Link",
          "product": "M18",
          "versions": [
            {
              "status": "affected",
              "version": "earlier",
              "lessThan": "1.10.01",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "D-Link",
          "product": "R03",
          "versions": [
            {
              "status": "affected",
              "version": "earlier",
              "lessThan": "1.10.01",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "D-Link",
          "product": "R04",
          "versions": [
            {
              "status": "affected",
              "version": "earlier",
              "lessThan": "1.10.01",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "D-Link",
          "product": "R12",
          "versions": [
            {
              "status": "affected",
              "version": "earlier",
              "lessThan": "1.10.01",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "D-Link",
          "product": "R18",
          "versions": [
            {
              "status": "affected",
              "version": "earlier",
              "lessThan": "1.10.01",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "D-Link",
          "product": "E30",
          "versions": [
            {
              "status": "affected",
              "version": "earlier",
              "lessThan": "1.10.02",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "D-Link",
          "product": "M30",
          "versions": [
            {
              "status": "affected",
              "version": "earlier",
              "lessThan": "1.10.02",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "D-Link",
          "product": "M32",
          "versions": [
            {
              "status": "affected",
              "version": "earlier",
              "lessThan": "1.10.02",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "D-Link",
          "product": "M60",
          "versions": [
            {
              "status": "affected",
              "version": "earlier",
              "lessThan": "1.10.02",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "D-Link",
          "product": "R32",
          "versions": [
            {
              "status": "affected",
              "version": "earlier",
              "lessThan": "1.10.02",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "D-Link",
          "product": "E15",
          "versions": [
            {
              "status": "affected",
              "version": "earlier",
              "lessThan": "1.20.01",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "D-Link",
          "product": "R15",
          "versions": [
            {
              "status": "affected",
              "version": "earlier",
              "lessThan": "1.20.01",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-06-17T03:15:09.163",
  "references": [
    {
      "url": "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10398",
      "source": "twcert@cert.org.tw"
    },
    {
      "url": "https://www.twcert.org.tw/en/cp-139-7878-7c3d9-2.html",
      "source": "twcert@cert.org.tw"
    },
    {
      "url": "https://www.twcert.org.tw/tw/cp-132-7877-b4674-1.html",
      "source": "twcert@cert.org.tw"
    },
    {
      "url": "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10398",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.twcert.org.tw/en/cp-139-7878-7c3d9-2.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.twcert.org.tw/tw/cp-132-7877-b4674-1.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "twcert@cert.org.tw",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Certain models of D-Link wireless routers have a path traversal vulnerability. Unauthenticated attackers on the same local area network can read arbitrary system files by manipulating the URL."
    },
    {
      "lang": "es",
      "value": "Ciertos modelos de enrutadores inalámbricos D-Link tienen una vulnerabilidad de path traversal. Los atacantes no autenticados en la misma red de área local pueden leer archivos arbitrarios del sistema manipulando la URL."
    }
  ],
  "lastModified": "2026-06-17T08:17:10.177",
  "sourceIdentifier": "twcert@cert.org.tw"
}