VYPR
← All advisories
High severity7.3CISA KEVNVD Advisory· Published Apr 4, 2024· Updated Jun 17, 2026

CVE-2024-3273

CVE-2024-3273

Description

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. Affected is an unknown function of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument system leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259284. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

31
  • Dlink/Dnr 202l Firmware
    cpe:2.3:o:dlink:dnr-202l_firmware:-:*:*:*:*:*:*:*
  • Dlink/Dnr 322l Firmware
    cpe:2.3:o:dlink:dnr-322l_firmware:-:*:*:*:*:*:*:*
  • Dlink/Dnr 326 Firmware
    cpe:2.3:o:dlink:dnr-326_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS 1100 4 Firmware
    cpe:2.3:o:dlink:dns-1100-4_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS 1200 05 Firmware2 versions
    cpe:2.3:o:dlink:dns-1200-05_firmware:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:dlink:dns-1200-05_firmware:-:*:*:*:*:*:*:*
    • cpe:2.3:o:dlink:dns-120_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS 1550 04 Firmware
    cpe:2.3:o:dlink:dns-1550-04_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS 325 Firmware5 versions
    cpe:2.3:o:dlink:dns-315l_firmware:-:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:o:dlink:dns-315l_firmware:-:*:*:*:*:*:*:*
    • cpe:2.3:o:dlink:dns-320l_firmware:1.01.0702.2013:*:*:*:*:*:*:*
    • cpe:2.3:o:dlink:dns-320l_firmware:1.03.0904.2013:*:*:*:*:*:*:*
    • cpe:2.3:o:dlink:dns-320l_firmware:1.11:*:*:*:*:*:*:*
    • cpe:2.3:o:dlink:dns-325_firmware:1.01:*:*:*:*:*:*:*
  • Dlink/DNS 320 Firmware
    cpe:2.3:o:dlink:dns-320_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS 320lw Firmware
    cpe:2.3:o:dlink:dns-320lw_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS 321 Firmware
    cpe:2.3:o:dlink:dns-321_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS 327l Firmware3 versions
    cpe:2.3:o:dlink:dns-323_firmware:-:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:dlink:dns-323_firmware:-:*:*:*:*:*:*:*
    • cpe:2.3:o:dlink:dns-327l_firmware:1.00.0409.2013:*:*:*:*:*:*:*
    • cpe:2.3:o:dlink:dns-327l_firmware:1.09:*:*:*:*:*:*:*
  • Dlink/DNS 326 Firmware
    cpe:2.3:o:dlink:dns-326_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS 340l Firmware
    cpe:2.3:o:dlink:dns-340l_firmware:1.08:*:*:*:*:*:*:*
  • Dlink/DNS 343 Firmware
    cpe:2.3:o:dlink:dns-343_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS 345 Firmware
    cpe:2.3:o:dlink:dns-345_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS 726 4 Firmware
    cpe:2.3:o:dlink:dns-726-4_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS-325llm-create
    Range: <20240403
  • Dlink/DNS-320Lllm-create
    Range: <20240403
  • Dlink/DNS-327Lllm-create2 versions
    <20240403+ 1 more
    • (no CPE)range: <20240403
    • (no CPE)range: 20240403
  • Dlink/DNS-340Lllm-create2 versions
    <20240403+ 1 more
    • (no CPE)range: <20240403
    • (no CPE)range: 20240403
  • Dlink/DNS-320cpe-rescue2 versions
    20240403+ 1 more
    • (no CPE)range: 20240403
    • (no CPE)range: 20240403

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.