CVE-2024-0717D-Link Good Line Router v2 HTTP GET Request devinfo information disclosure

5.3MediumCVSS base score
18.2%Exploitation in 30 daysEPSS · top 2.7% of all CVEs
NoKnown exploitednot in CISA's KEV catalog
YesPublic exploitsa reference or SSVC says so

Description

A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825AC, DIR-825ACF, DIR-825ACG1, DIR-841, DIR-842, DIR-842S, DIR-843, DIR-853, DIR-878, DIR-882, DIR-1210, DIR-1260, DIR-2150, DIR-X1530, DIR-X1860, DSL-224, DSL-245GR, DSL-2640U, DSL-2750U, DSL-G2452GR, DVG-5402G, DVG-5402G, DVG-5402GFRU, DVG-N5402G, DVG-N5402G-IL, DWM-312W, DWM-321, DWR-921, DWR-953 and Good Line Router v2 up to 20240112. This vulnerability affects unknown code of the file /devinfo of the component HTTP GET Request Handler. The manipulation of the argument area with the input notice|net|version leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-251542 is the identifier assigned to this vulnerability.

Public exploit

An exploit or proof of concept is public: anyone can try it against an unpatched system. A reference of the record is tagged as an exploit. CISA's SSVC rates its exploitation: a proof of concept is public.

Show the exploits1

References tagged exploit1 reference

https://github.com/999zzzzz/D-Link (opens in a new tab)exploitx_transferred

Timeline

2024
19 Jan 2024
19 Jan 2024
ID reserved
By VulDB
19 Jan 2024
19 Jan 2024
Published
2025
30 May 202517 months later
30 May 2025· 17 months later
Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2024-0717, by who scored it
Scored by	CVSS	Score	Vector
VulDBCNA (assigner)	3.1	Medium5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
VulDBCNA (assigner)	3.0	Medium5.3	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
VulDBCNA (assigner)	2.0	Medium5.0	AV:N/AC:L/Au:N/C:P/I:N/A:N
NVDNVD · Modified	3.1	Medium5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS (exploitation in 30 days): 18.2% · top 2.7% of all CVEs (13 Nov 2026)
CISA SSVC: Exploitation: poc · Automatable: yes · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.3.

Affected products

D-Link · DAP-1360
- affected 20240112
D-Link · DIR-300
- affected 20240112
D-Link · DIR-615
- affected 20240112
D-Link · DIR-615GF
- affected 20240112
D-Link · DIR-615S
- affected 20240112
D-Link · DIR-615T
- affected 20240112
D-Link · DIR-620
- affected 20240112
D-Link · DIR-620S
- affected 20240112
D-Link · DIR-806A
- affected 20240112
D-Link · DIR-815
- affected 20240112
D-Link · DIR-815AC
- affected 20240112
D-Link · DIR-815S
- affected 20240112
D-Link · DIR-816
- affected 20240112
D-Link · DIR-820
- affected 20240112
D-Link · DIR-822
- affected 20240112
D-Link · DIR-825
- affected 20240112
D-Link · DIR-825AC
- affected 20240112
D-Link · DIR-825ACF
- affected 20240112
D-Link · DIR-825ACG1
- affected 20240112
D-Link · DIR-841
- affected 20240112
D-Link · DIR-842
- affected 20240112
D-Link · DIR-842S
- affected 20240112
D-Link · DIR-843
- affected 20240112
D-Link · DIR-853
- affected 20240112
D-Link · DIR-878
- affected 20240112
D-Link · DIR-882
- affected 20240112
D-Link · DIR-1210
- affected 20240112
D-Link · DIR-1260
- affected 20240112
D-Link · DIR-2150
- affected 20240112
D-Link · DIR-X1530
- affected 20240112
D-Link · DIR-X1860
- affected 20240112
D-Link · DSL-224
- affected 20240112
D-Link · DSL-245GR
- affected 20240112
D-Link · DSL-2640U
- affected 20240112
D-Link · DSL-2750U
- affected 20240112
D-Link · DSL-G2452GR
- affected 20240112
D-Link · DVG-5402G
- affected 20240112
D-Link · DVG-5402G
- affected 20240112
D-Link · DVG-5402GFRU
- affected 20240112
D-Link · DVG-N5402G
- affected 20240112
D-Link · DVG-N5402G-IL
- affected 20240112
D-Link · DWM-312W
- affected 20240112
D-Link · DWM-321
- affected 20240112
D-Link · DWR-921
- affected 20240112
D-Link · DWR-953
- affected 20240112
D-Link · Good Line Router v2
- affected 20240112

References3

https://vuldb.com/?id.251542 (opens in a new tab)vdb-entrytechnical-descriptionx_transferred
https://vuldb.com/?ctiid.251542 (opens in a new tab)signaturepermissions-requiredx_transferred
https://github.com/999zzzzz/D-Link (opens in a new tab)exploitx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2024-0717](https://cveledger.app/badge/CVE-2024-0717.svg)](https://cveledger.app/cve/CVE-2024-0717)

Record last updated 30 May 2025, 14:26 UTC.