CVE-2024-3272

criticalpriority · act · 90OT risk · criticalKEV · exploitedEPSS 0.981 · 100 %ileexploit · PoCEURUUS

grimoire priorityP0 · Act now

Exploitable?

Yes · in the wild

CISA KEV · 1 exploit · PoC

Likely / severe?

98.1% (100th) EPSS

CVSS 9.8 · critical

Is it mine?

46 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · fstec_bdu

added 2024-04-11remediate by 2024-05-02

required action This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.

EPSS · scored 2026-10-24

D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as very critical, has been found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. This issue affects some unknown processing of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument user with the input messagebus leads to hard-coded credentials. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259283. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.

cvss

Technical severity, 0–10. One row per scoring source.

10.0

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 9.8–10

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 5.9

v2.010highAV:N/AC:L/Au:N/C:C/I:C/A:Csecondary · cna@vuldb.comexploitability 10 · impact 10

v3.19.8criticalAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · cna@vuldb.comexploitability 3.9 · impact 5.9

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: active · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-798USCWE-798US

exploits (1)

Public proof-of-concept and weaponised exploit code.

aliask/dinkleberryPatch your D-Link device affected by CVE-2024-3272 PoC · poc_in_github

affected products (46)

Products and version ranges known to be affected.

D-Link DNS-320L≤ 20240403enisa_euvdEU
D-Link DNS-325≤ 20240403enisa_euvdEU
D-Link DNS-327L≤ 20240403enisa_euvdEU
D-Link DNS-340L≤ 20240403enisa_euvdEU
D-Link Corp. DNR-202Lall versionsfstec_bduRU
D-Link Corp. DNR-322Lall versionsfstec_bduRU
D-Link Corp. DNR-326all versionsfstec_bduRU
D-Link Corp. DNS-1100-4all versionsfstec_bduRU
D-Link Corp. DNS-120all versionsfstec_bduRU
D-Link Corp. DNS-1200-05all versionsfstec_bduRU
D-Link Corp. DNS-315Lall versionsfstec_bduRU
D-Link Corp. DNS-320all versionsfstec_bduRU
D-Link Corp. DNS-320Lall versionsfstec_bduRU
D-Link Corp. DNS-320LWall versionsfstec_bduRU
D-Link Corp. DNS-321all versionsfstec_bduRU
D-Link Corp. DNS-323all versionsfstec_bduRU
D-Link Corp. DNS-325all versionsfstec_bduRU
D-Link Corp. DNS-326all versionsfstec_bduRU
D-Link Corp. DNS-327Lall versionsfstec_bduRU
D-Link Corp. DNS-340Lall versionsfstec_bduRU

showing 20 of 46

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu NVD CVE.org MITRE

published 2024-04-04modified 2026-06-17

references (14)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan