CVE-2024-3272

KEV
Published: Apr 04, 2024 Last Modified: Ott 30, 2025
ExploitDB:
Other exploit source:
Google Dorks:
CRITICAL 9,8
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
HIGH 10,0
Source: [email protected]
Access Vector: network
Access Complexity: low
Authentication: none
Confidentiality: complete
Integrity: complete
Availability: complete

Description

AI Translation Available

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as very critical, has been found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. This issue affects some unknown processing of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument user with the input messagebus leads to hard-coded credentials. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259283. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,9415
Percentile
1,0th
Updated

EPSS Score Trend (Last 90 Days)

798

Use of Hard-coded Credentials

Draft
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Access Control Integrity Confidentiality Availability Other
Potential Impacts:
Bypass Protection Mechanism Read Application Data Gain Privileges Or Assume Identity Execute Unauthorized Code Or Commands Other
Applicable Platforms
Technologies: Mobile, ICS/OT
Likelihood of Exploit: High
View CWE Details
Operating System

Dns-345 Firmware by Dlink

Product Information
Vendor Dlink
Product Dns-345 Firmware
Version -
cpe:2.3:o:dlink:dns-345_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Dns-327L Firmware by Dlink

Product Information
Vendor Dlink
Product Dns-327L Firmware
Version 1.00.0409.2013
cpe:2.3:o:dlink:dns-327l_firmware:1.00.0409.2013:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Dns-726-4 Firmware by Dlink

Product Information
Vendor Dlink
Product Dns-726-4 Firmware
Version -
cpe:2.3:o:dlink:dns-726-4_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Dns-1200-05 Firmware by Dlink

Product Information
Vendor Dlink
Product Dns-1200-05 Firmware
Version -
cpe:2.3:o:dlink:dns-1200-05_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Dns-320 Firmware by Dlink

Product Information
Vendor Dlink
Product Dns-320 Firmware
Version -
cpe:2.3:o:dlink:dns-320_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Dns-327L Firmware by Dlink

Product Information
Vendor Dlink
Product Dns-327L Firmware
Version 1.09
cpe:2.3:o:dlink:dns-327l_firmware:1.09:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Dns-323 Firmware by Dlink

Product Information
Vendor Dlink
Product Dns-323 Firmware
Version -
cpe:2.3:o:dlink:dns-323_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Dns-1100-4 Firmware by Dlink

Product Information
Vendor Dlink
Product Dns-1100-4 Firmware
Version -
cpe:2.3:o:dlink:dns-1100-4_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Dnr-326 Firmware by Dlink

Product Information
Vendor Dlink
Product Dnr-326 Firmware
Version -
cpe:2.3:o:dlink:dnr-326_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Dns-320Lw Firmware by Dlink

Product Information
Vendor Dlink
Product Dns-320Lw Firmware
Version -
cpe:2.3:o:dlink:dns-320lw_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Dns-320L Firmware by Dlink

Product Information
Vendor Dlink
Product Dns-320L Firmware
Version 1.11
cpe:2.3:o:dlink:dns-320l_firmware:1.11:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Dns-320L Firmware by Dlink

Product Information
Vendor Dlink
Product Dns-320L Firmware
Version 1.03.0904.2013
cpe:2.3:o:dlink:dns-320l_firmware:1.03.0904.2013:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Dnr-202L Firmware by Dlink

Product Information
Vendor Dlink
Product Dnr-202L Firmware
Version -
cpe:2.3:o:dlink:dnr-202l_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Dns-340L Firmware by Dlink

Product Information
Vendor Dlink
Product Dns-340L Firmware
Version 1.08
cpe:2.3:o:dlink:dns-340l_firmware:1.08:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Dns-320L Firmware by Dlink

Product Information
Vendor Dlink
Product Dns-320L Firmware
Version 1.01.0702.2013
cpe:2.3:o:dlink:dns-320l_firmware:1.01.0702.2013:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Dns-315L Firmware by Dlink

Product Information
Vendor Dlink
Product Dns-315L Firmware
Version -
cpe:2.3:o:dlink:dns-315l_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Dnr-322L Firmware by Dlink

Product Information
Vendor Dlink
Product Dnr-322L Firmware
Version -
cpe:2.3:o:dlink:dnr-322l_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Dns-1550-04 Firmware by Dlink

Product Information
Vendor Dlink
Product Dns-1550-04 Firmware
Version -
cpe:2.3:o:dlink:dns-1550-04_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Dns-326 Firmware by Dlink

Product Information
Vendor Dlink
Product Dns-326 Firmware
Version -
cpe:2.3:o:dlink:dns-326_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Dns-120 Firmware by Dlink

Product Information
Vendor Dlink
Product Dns-120 Firmware
Version -
cpe:2.3:o:dlink:dns-120_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Dns-321 Firmware by Dlink

Product Information
Vendor Dlink
Product Dns-321 Firmware
Version -
cpe:2.3:o:dlink:dns-321_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Dns-343 Firmware by Dlink

Product Information
Vendor Dlink
Product Dns-343 Firmware
Version -
cpe:2.3:o:dlink:dns-343_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Dns-325 Firmware by Dlink

Product Information
Vendor Dlink
Product Dns-325 Firmware
Version 1.01
cpe:2.3:o:dlink:dns-325_firmware:1.01:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://www.cisa.gov/known-exploited-vulnerabilities-catalo…
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024…
https://github.com/netsecfish/dlink
https://github.com/netsecfish/dlink
https://supportannouncement.us.dlink.com/security/publicati…
https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383
https://vuldb.com/?ctiid.259283
https://vuldb.com/?ctiid.259283
https://vuldb.com/?id.259283
https://vuldb.com/?id.259283
https://github.com/netsecfish/dlink
https://github.com/netsecfish/dlink
https://supportannouncement.us.dlink.com/security/publicati…
https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383
https://vuldb.com/?ctiid.259283
https://vuldb.com/?ctiid.259283
https://vuldb.com/?id.259283
https://vuldb.com/?id.259283