** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as very critical, has been found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. This issue affects some unknown processing of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument user with the input messagebus leads to hard-coded credentials. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259283. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.
Metrics
Affected Vendors & Products
References
History
Fri, 29 Nov 2024 17:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
CPEs | cpe:2.3:o:dlink:dns-325_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:dlink:dns-327l_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:dlink:dns-340l_firmware:-:*:*:*:*:*:*:* |
cpe:2.3:o:dlink:dns-320l_firmware:1.01.0702.2013:*:*:*:*:*:*:* cpe:2.3:o:dlink:dns-320l_firmware:1.03.0904.2013:*:*:*:*:*:*:* cpe:2.3:o:dlink:dns-320l_firmware:1.11:*:*:*:*:*:*:* cpe:2.3:o:dlink:dns-325_firmware:1.01:*:*:*:*:*:*:* cpe:2.3:o:dlink:dns-327l_firmware:1.00.0409.2013:*:*:*:*:*:*:* cpe:2.3:o:dlink:dns-327l_firmware:1.09:*:*:*:*:*:*:* cpe:2.3:o:dlink:dns-340l_firmware:1.08:*:*:*:*:*:*:* |
MITRE
Status: PUBLISHED
Assigner: VulDB
Published: 2024-04-04T01:00:05.740Z
Updated: 2024-08-01T20:05:08.352Z
Reserved: 2024-04-03T18:21:29.925Z
Link: CVE-2024-3272
Vulnrichment
Updated: 2024-08-01T20:05:08.352Z
NVD
Status : Analyzed
Published: 2024-04-04T01:15:50.123
Modified: 2024-11-29T16:45:43.063
Link: CVE-2024-3272
Redhat
No data.