Live › vulnerability › CVE-2024-3273
Go to dashboardD-Link DNS-320L, DNS-325, DNS-327L and DNS-340L NAS devices have a command injection flaw that, combined with CVE-2024-3272, allows remote unauthenticated code execution. An attacker gets a shell on the device and can read or change files stored on it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| D-Link Multiple NAS Devices | vendor | – | – |
| dlink dns-320l firmware | vendor | = 1.01.0702.2013 | – |
| dlink dns-320l firmware | vendor | = 1.03.0904.2013 | – |
| dlink dns-320l firmware | vendor | = 1.11 | – |
| dlink dns-120 firmware | vendor | – | – |
| dlink dnr-202l firmware | vendor | – | – |
| dlink dns-315l firmware | vendor | – | – |
| dlink dns-320 firmware | vendor | – | – |
| dlink dns-320lw firmware | vendor | – | – |
| dlink dns-321 firmware | vendor | – | – |
| dlink dnr-322l firmware | vendor | – | – |
| dlink dns-323 firmware | vendor | – | – |
| dlink dns-325 firmware | vendor | = 1.01 | – |
| dlink dns-326 firmware | vendor | – | – |
| dlink dns-327l firmware | vendor | = 1.00.0409.2013 | – |
| dlink dns-327l firmware | vendor | = 1.09 | – |
| dlink dnr-326 firmware | vendor | – | – |
| dlink dns-340l firmware | vendor | = 1.08 | – |
| dlink dns-343 firmware | vendor | – | – |
| dlink dns-345 firmware | vendor | – | – |
| dlink dns-726-4 firmware | vendor | – | – |
| dlink dns-1100-4 firmware | vendor | – | – |
| dlink dns-1200-05 firmware | vendor | – | – |
| dlink dns-1550-04 firmware | vendor | – | – |
Identify whether any D-Link DNS-320L, DNS-325, DNS-327L or DNS-340L NAS is on the network, for example by checking device labels or the admin inventory.
Retire and replace the affected end-of-life D-Link NAS devices per vendor instructions, as CISA requires.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. Affected is an unknown function of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument system leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259284. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.
This page as .md · .json · in your agent: get_signal("CVE-2024-3273")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.