CVE-2024-3274 | D-Link DNS-320L/DNS-320LW/DNS-327L up to 20240403 HTTP GET Request /cgi-bin/info.cgi information disclosure

A vulnerability has been found in D-Link DNS-320L, DNS-320LW and DNS-327L up to 20240403 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/info.cgi of the component HTTP GET Request Handler. The manipulation leads to information disclosure.

This vulnerability is known as CVE-2024-3274. The attack can be launched remotely. Furthermore, there is an exploit available.

Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.

It is recommended to apply restrictive firewalling.