CVE-2024-4022

A vulnerability was found in Keenetic KN-1010, KN-1410, KN-1711, KN-1810 and KN-1910 up to 4.1.2.15. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /version.js of the component Version Data Handler. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-261674 is the identifier assigned to this vulnerability. NOTE: The vendor is aware of this issue and plans to fix it by the end of 2024.

• CWE-200

• https://netsecfish.notion.site/Information-Disclosure-in-Keenetic-Router-d4a12a499cef4acf80e191bdaf20c151?pvs=4
• https://vuldb.com/?ctiid.261674
• https://vuldb.com/?id.261674
• https://vuldb.com/?submit.316276
• https://netsecfish.notion.site/Information-Disclosure-in-Keenetic-Router-d4a12a499cef4acf80e191bdaf20c151?pvs=4
• https://vuldb.com/?ctiid.261674
• https://vuldb.com/?id.261674
• https://vuldb.com/?submit.316276

Published

Apr 21, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-4014The hCaptcha for WordPress plugin for WordPress is vulnerabl…6.4
• CVE-2024-4017Improper Privilege Management vulnerability in BeyondTrust U…7.8
• CVE-2024-4018Improper Privilege Management vulnerability in BeyondTrust U…7.8
• CVE-2024-4019A vulnerability classified as critical has been found in Byz…6.3
• CVE-2024-4020A vulnerability was found in Tenda FH1206 1.2.0.8(8155) and …8.8
• CVE-2024-4021A vulnerability was found in Keenetic KN-1010, KN-1410, KN-1…5.3
• CVE-2024-4023A stored cross-site scripting (XSS) vulnerability exists in …8.1
• CVE-2024-40239An incorrect access control issue in Life: Personal Diary, J…6.8
• CVE-2024-4024An issue has been discovered in GitLab CE/EE affecting all v…8.8
• CVE-2024-40240An incorrect access control issue in HomeServe Home Repair' …6.8
• CVE-2024-4025A Denial of Service (DoS) condition has been discovered in G…7.5
• CVE-2024-4026Cross-Site Scripting (XSS) vulnerability in the Holded appli…4.6