Critical severity · published Apr 4, 2024
CVE-2024-3273
D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection
In wildKEV
9.8
CVSS
100%
EPSS
Yes
On KEV
Description
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. Affected is an unknown function of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument system leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259284. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)100.0% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Apr 11, 2024
Federal remediation dueMay 2, 2024
Ransomware campaign useNot known
Affected products
Which versions
DN
DNS-320L · D-Link
20240403 · source: vendor
DN
DNS-325 · D-Link
20240403 · source: vendor
DN
DNS-327L · D-Link
20240403 · source: vendor
DN
DNS-340L · D-Link
20240403 · source: vendor
DF
Dnr-202l Firmware · Dlink
All versions, or not specified · source: NVD
DF
Dnr-322l Firmware · Dlink
All versions, or not specified · source: NVD
DF
Dnr-326 Firmware · Dlink
All versions, or not specified · source: NVD
DF
Dns-1100-4 Firmware · Dlink
All versions, or not specified · source: NVD
DF
Dns-120 Firmware · Dlink
All versions, or not specified · source: NVD
DF
Dns-1200-05 Firmware · Dlink
All versions, or not specified · source: NVD
DF
Dns-1550-04 Firmware · Dlink
All versions, or not specified · source: NVD
DF
Dns-315l Firmware · Dlink
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-3273
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-3273
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
vdb-entry
https://vuldb.com/?id.259284
signature
https://vuldb.com/?ctiid.259284
third-party-advisory
https://vuldb.com/?submit.304661
exploit
https://github.com/netsecfish/dlink
related
https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383
More from DNS-320L
9.8
CVE-2024-3272
D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials
9.9
CVE-2026-82689
D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 ISO Image isomount_mgr.cgi os command injection
9.8
CVE-2026-4214
D-Link DNS-1550-04 app_mgr.cgi UPnP_AV_Server_Path_Setting stack-based overflow
9.8
CVE-2026-4213
D-Link DNS-1550-04 gui_mgr.cgi cgi_myfavorite_verify stack-based overflow
9.8
CVE-2026-4212
D-Link DNS-1550-04 download_mgr.cgi Downloads_Schedule_Info stack-based overflow