ID
VAR-202403-0393
CVE
CVE-2024-27684
TITLE
D-Link GO-RT-AC750 cross-site scripting vulnerability
Trust: 0.6
sources:
CNVD: CNVD-2024-12209
DESCRIPTION
A Cross-site scripting (XSS) vulnerability in dlapn.cgi, dldongle.cgi, dlcfg.cgi, fwup.cgi and seama.cgi in D-Link GORTAC750_A1_FW_v101b03 allows remote attackers to inject arbitrary web script or HTML via the url parameter. D-Link GO-RT-AC750 is a wireless dual-band simple router from China D-Link. D-Link GO-RT-AC750 has a cross-site scripting vulnerability. This vulnerability stems from the lack of effective filtering and escaping of user-provided data in components such as dlapn.cgi and dldongle.cgi
Trust: 1.44
sources:
NVD: CVE-2024-27684 //
CNVD: CNVD-2024-12209
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
sources:
CNVD: CNVD-2024-12209
AFFECTED PRODUCTS
| vendor: | d x electronic equipment | model: | go-rt-ac750 a1 fw v101b03 | scope: | - | version: | - | Trust: 0.6 |
sources:
CNVD: CNVD-2024-12209
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||
|
|
sources:
CNVD: CNVD-2024-12209
EXTERNAL IDS
| db: | NVD | id: | CVE-2024-27684 | Trust: 1.6 |
| db: | CNVD | id: | CNVD-2024-12209 | Trust: 0.6 |
sources:
CNVD: CNVD-2024-12209 //
NVD: CVE-2024-27684
REFERENCES
| url: | https://www.dlink.com/en/security-bulletin/ | Trust: 1.6 |
| url: | https://drive.google.com/file/d/1qu4ibqgeawoltxjvotxsaaussho2ie-y/view | Trust: 1.0 |
sources:
CNVD: CNVD-2024-12209 //
NVD: CVE-2024-27684
SOURCES
| db: | CNVD | id: | CNVD-2024-12209 |
| db: | NVD | id: | CVE-2024-27684 |
LAST UPDATE DATE
2024-03-14T03:14:25.338000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2024-12209 | date: | 2024-03-08T00:00:00 |
| db: | NVD | id: | CVE-2024-27684 | date: | 2024-03-04T15:35:25.673 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2024-12209 | date: | 2024-03-08T00:00:00 |
| db: | NVD | id: | CVE-2024-27684 | date: | 2024-03-04T14:15:41.587 |