** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as very critical, has been found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. This issue affects some unknown processing of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument user with the input messagebus leads to hard-coded credentials. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259283. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.
History

Wed, 30 Jul 2025 02:15:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:o:dlink:dns-320l_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dns-325_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dns-327l_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dns-340l_firmware:-:*:*:*:*:*:*:*
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Tue, 15 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.94215}

epss

{'score': 0.94181}


Fri, 29 Nov 2024 17:15:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:o:dlink:dns-320l_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dns-325_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dns-327l_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dns-340l_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dns-320l_firmware:1.01.0702.2013:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dns-320l_firmware:1.03.0904.2013:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dns-320l_firmware:1.11:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dns-325_firmware:1.01:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dns-327l_firmware:1.00.0409.2013:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dns-327l_firmware:1.09:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dns-340l_firmware:1.08:*:*:*:*:*:*:*

cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published: 2024-04-04T01:00:05.740Z

Updated: 2025-07-30T01:37:05.436Z

Reserved: 2024-04-03T18:21:29.925Z

Link: CVE-2024-3272

cve-icon Vulnrichment

Updated: 2024-08-01T20:05:08.352Z

cve-icon NVD

Status : Analyzed

Published: 2024-04-04T01:15:50.123

Modified: 2024-11-29T16:45:43.063

Link: CVE-2024-3272

cve-icon Redhat

No data.