ID
VAR-202405-1111
CVE
CVE-2024-33111
TITLE
D-Link DIR-845L Cross-Site Scripting Vulnerability
Trust: 0.6
sources:
CNVD: CNVD-2024-23131
DESCRIPTION
D-Link DIR-845L router <=v1.01KRb03 is vulnerable to Cross Site Scripting (XSS) via /htdocs/webinc/js/bsc_sms_inbox.php. D-Link DIR-845L is a wireless router from D-Link, a Chinese company. D-Link DIR-845L v1.01KRb03 and earlier versions have a cross-site scripting vulnerability, which can be exploited by attackers to execute scripts in the victim's web browser using specially crafted URLs
Trust: 1.44
sources:
NVD: CVE-2024-33111 //
CNVD: CNVD-2024-23131
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
sources:
CNVD: CNVD-2024-23131
AFFECTED PRODUCTS
| vendor: | d link | model: | dir-845l <=v1.01krb03 | scope: | - | version: | - | Trust: 0.6 |
sources:
CNVD: CNVD-2024-23131
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||
|
|
sources:
CNVD: CNVD-2024-23131
PATCH
| title: | Patch for D-Link DIR-845L Cross-Site Scripting Vulnerability | url: | https://www.cnvd.org.cn/patchInfo/show/546786 | Trust: 0.6 |
sources:
CNVD: CNVD-2024-23131
EXTERNAL IDS
| db: | NVD | id: | CVE-2024-33111 | Trust: 1.6 |
| db: | CNVD | id: | CNVD-2024-23131 | Trust: 0.6 |
sources:
CNVD: CNVD-2024-23131 //
NVD: CVE-2024-33111
REFERENCES
| url: | https://github.com/yj94/yj_learning/blob/main/week16/d-link-poc.md | Trust: 1.6 |
sources:
CNVD: CNVD-2024-23131 //
NVD: CVE-2024-33111
SOURCES
| db: | CNVD | id: | CNVD-2024-23131 |
| db: | NVD | id: | CVE-2024-33111 |
LAST UPDATE DATE
2024-08-14T15:05:07.644000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2024-23131 | date: | 2024-05-17T00:00:00 |
| db: | NVD | id: | CVE-2024-33111 | date: | 2024-05-06T16:00:59.253 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2024-23131 | date: | 2024-05-17T00:00:00 |
| db: | NVD | id: | CVE-2024-33111 | date: | 2024-05-06T15:15:23.593 |