D-Link G416 httpd Improper Handling of Exceptional Conditions Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack of proper handling of error conditions. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root. Was ZDI-CAN-21664.
References
| Link | Resource |
|---|---|
| https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10367 | Mitigation Vendor Advisory |
| https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10367 | Mitigation Vendor Advisory |
| https://www.zerodayinitiative.com/advisories/ZDI-23-1828/ | Third Party Advisory |
| https://www.zerodayinitiative.com/advisories/ZDI-23-1828/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
10 Mar 2025, 16:26
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| CPE | cpe:2.3:o:dlink:g416_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:dlink:g416:-:*:*:*:*:*:*:* |
|
| First Time |
Dlink g416 Firmware
Dlink Dlink g416 |
|
| CWE | CWE-755 | |
| References | () https://www.zerodayinitiative.com/advisories/ZDI-23-1828/ - Third Party Advisory | |
| References | () https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10367 - Mitigation, Vendor Advisory |
03 May 2024, 03:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-05-03 03:16
Updated : 2025-03-10 16:26
NVD link : CVE-2023-50212
Mitre link : CVE-2023-50212
JSON object : View
Products Affected
dlink
- g416_firmware
- g416
CWE
CWE-755
Improper Handling of Exceptional Conditions