Information Disclosure in D-Link Router

CVE-2024-44408

What is CVE-2024-44408?

The D-Link DIR-823G v1.0.2B05_20181207 is susceptible to an Information Disclosure vulnerability that permits unauthorized access to sensitive configuration files. Attackers can exploit this flaw to download configuration files that contain plaintext user passwords, leading to potential compromise of sensitive accounts and unauthorized access to the network. Securing these devices and applying the necessary updates is critical to mitigate the risk posed by this vulnerability.

References