Medium severity5.3NVD Advisory· Published Nov 6, 2024· Updated Jun 17, 2026

CVE-2024-10916

Description

A vulnerability classified as problematic has been found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. This affects an unknown part of the file /xml/info.xml of the component HTTP GET Request Handler. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dlink/DNS-320llm-create4 versions
<=20241028+ 3 more
- (no CPE)range: <=20241028
- (no CPE)range: 20241028
- (no CPE)range: 20241028
- (no CPE)range: 20241028
Dlink/DNS-325llm-create
Range: <=20241028
Dlink/DNS-340Lllm-create2 versions
<=20241028+ 1 more
- (no CPE)range: <=20241028
- (no CPE)range: 20241028
Dlink/DNS 320 Firmware
cpe:2.3:o:dlink:dns-320_firmware:*:*:*:*:*:*:*:*
Dlink/DNS 320lw Firmware
cpe:2.3:o:dlink:dns-320lw_firmware:*:*:*:*:*:*:*:*
Dlink/DNS 325 Firmware
cpe:2.3:o:dlink:dns-325_firmware:*:*:*:*:*:*:*:*
Dlink/DNS 340l Firmware
cpe:2.3:o:dlink:dns-340l_firmware:*:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

netsecfish.notion.site/Information-Disclosure-Vulnerability-Report-in-xml-info-xml-for-D-Link-NAS-12d6b683e67c8019a311e699582f51b6nvdExploitThird Party Advisory
vuldb.comnvdThird Party Advisory
vuldb.comnvdThird Party Advisory
vuldb.comnvdThird Party Advisory
www.dlink.comnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000