PT-2024-7783 · D Link · D-Link Dir-823G

Published 2024-08-07 · Updated 2024-09-10 · CVE-2024-44408

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions D-Link DIR-823G version 1.0.2B05 20181207

Description The issue is related to insufficient protection of service data, allowing unauthorized configuration file downloads. These configuration files contain plaintext user passwords, which can be accessed by an attacker, potentially leading to information disclosure.

Recommendations For D-Link DIR-823G version 1.0.2B05 20181207, consider restricting access to configuration files to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using or storing sensitive information, such as plaintext user passwords, in the configuration files.

Exploit

Fix

Missing Authorization

Information Disclosure

Weakness Enumeration

CWE-862

CWE-200

Related Identifiers

BDU:2024-09283

CVE-2024-44408

Affected Products

D-Link Dir-823G

References · 9

• 🔥 https://github.com/lonelylonglong/openfile-/blob/main/DIR-823G.md/DIR-823G.md · Exploit
• 🔥 https://github.com/lonelylonglong/openfile-/blob/main/DIR-823G.md/CVE-2024-44408 · Exploit
• https://bdu.fstec.ru/vul/2024-09283 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-44408 · Security Note
• https://osv.dev/vulnerability/CVE-2024-44408 · Vendor Advisory
• https://t.me/cvedetector/4979 · Telegram Post
• https://twitter.com/CVEnew/status/1832091391037723102 · Twitter Post
• http://dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-823G(B) · Note
• https://twitter.com/VulmonFeeds/status/1832147721714639318 · Twitter Post