CVE-2024-3272 D-Link Multiple NAS Devices
D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L contains a hard-coded credential that allows an attacker to conduct authenticated command injection, leading to remote, unauthorized code execution.
- CVSS
- not scored
On CISA’s exploited list
D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability
- Added
- 2024-04-11
- Federal patch deadline
- 2024-05-02
- Ransomware use
- not known