Live › vulnerability › CVE-2024-3272
Go to dashboardD-Link DNS-320L, DNS-325, DNS-327L and DNS-340L NAS devices ship with a hard-coded credential. An attacker who uses it can run arbitrary commands on the device.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| D-Link Multiple NAS Devices | vendor | – | – |
| dlink dns-320l firmware | vendor | = 1.01.0702.2013 | – |
| dlink dns-320l firmware | vendor | = 1.03.0904.2013 | – |
| dlink dns-320l firmware | vendor | = 1.11 | – |
| dlink dns-120 firmware | vendor | – | – |
| dlink dnr-202l firmware | vendor | – | – |
| dlink dns-315l firmware | vendor | – | – |
| dlink dns-320 firmware | vendor | – | – |
| dlink dns-320lw firmware | vendor | – | – |
| dlink dns-321 firmware | vendor | – | – |
| dlink dnr-322l firmware | vendor | – | – |
| dlink dns-323 firmware | vendor | – | – |
| dlink dns-325 firmware | vendor | = 1.01 | – |
| dlink dns-326 firmware | vendor | – | – |
| dlink dns-327l firmware | vendor | = 1.00.0409.2013 | – |
| dlink dns-327l firmware | vendor | = 1.09 | – |
| dlink dnr-326 firmware | vendor | – | – |
| dlink dns-340l firmware | vendor | = 1.08 | – |
| dlink dns-343 firmware | vendor | – | – |
| dlink dns-345 firmware | vendor | – | – |
| dlink dns-726-4 firmware | vendor | – | – |
| dlink dns-1100-4 firmware | vendor | – | – |
| dlink dns-1200-05 firmware | vendor | – | – |
| dlink dns-1550-04 firmware | vendor | – | – |
Identify any D-Link DNS-320L, DNS-325, DNS-327L or DNS-340L on the network. unknown
Retire and replace the affected devices per vendor instructions, as all hardware revisions are end-of-life or end-of-service. unknown
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as very critical, has been found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. This issue affects some unknown processing of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument user with the input messagebus leads to hard-coded credentials. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259283. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.
This page as .md · .json · in your agent: get_signal("CVE-2024-3272")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.