coldbraid

CVE-2024-3273 D-Link Multiple NAS Devices

D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L contain a command injection vulnerability. When combined with CVE-2024-3272, this can lead to remote, unauthorized code execution.

CVSS
not scored

CWE-77

On CISA’s exploited list

D-Link Multiple NAS Devices Command Injection Vulnerability

Added
2024-04-11
Federal patch deadline
2024-05-02
Ransomware use
not known