{"history":[{"alert":0,"cve":"CVE-2024-3273","id":22716,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.99995, \"percentile\": 0.99988}"},{"alert":0,"cve":"CVE-2024-3273","id":20336,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.99995, \"percentile\": 0.99988}"},{"alert":0,"cve":"CVE-2024-3273","id":18305,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.99995, \"percentile\": 0.99988}"},{"alert":0,"cve":"CVE-2024-3273","id":16209,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.99995, \"percentile\": 0.99988}"},{"alert":0,"cve":"CVE-2024-3273","id":14187,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.99995, \"percentile\": 0.99988}"},{"alert":0,"cve":"CVE-2024-3273","id":11969,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.99995, \"percentile\": 0.99988}"},{"alert":0,"cve":"CVE-2024-3273","id":9955,"kind":"epss","observed_at":1793938800,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.99995, \"percentile\": 0.99988}"},{"alert":0,"cve":"CVE-2024-3273","id":7504,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.99995, \"percentile\": 0.99988}"},{"alert":1,"cve":"CVE-2024-3273","id":6096,"kind":"cna","observed_at":1793766000,"payload":"{\"containers\": {\"adp\": [{\"affected\": [{\"cpes\": [\"cpe:2.3:a:dlink:dns-320l_firmware:20240403:*:*:*:*:*:*:*\"], \"defaultStatus\": \"unknown\", \"product\": \"dns-320l_firmware\", \"vendor\": \"dlink\", \"versions\": [{\"status\": \"affected\", \"version\": \"20240403\"}]}, {\"cpes\": [\"cpe:2.3:a:dlink:dns-325_firmware:20240403:*:*:*:*:*:*:*\"], \"defaultStatus\": \"unknown\", \"product\": \"dns-325_firmware\", \"vendor\": \"dlink\", \"versions\": [{\"status\": \"affected\", \"version\": \"20240403\"}]}, {\"cpes\": [\"cpe:2.3:a:dlink:dns-327l_firmware:20240403:*:*:*:*:*:*:*\"], \"defaultStatus\": \"unknown\", \"product\": \"dns-327l_firmware\", \"vendor\": \"dlink\", \"versions\": [{\"status\": \"affected\", \"version\": \"20240403\"}]}, {\"cpes\": [\"cpe:2.3:a:dlink:dns-340l_firmware:20240403:*:*:*:*:*:*:*\"], \"defaultStatus\": \"unknown\", \"product\": \"dns-340l_firmware\", \"vendor\": \"dlink\", \"versions\": [{\"status\": \"affected\", \"version\": \"20240403\"}]}], \"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2024-3273\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2024-04-12T04:00:37.894213Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2024-04-11\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-3273\"}, \"type\": \"kev\"}}], \"providerMetadata\": {\"dateUpdated\": \"2025-10-21T23:05:22.196Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"url\": \"https://www.greynoise.io/blog/cve-2024-3273-d-link-nas-rce-exploited-in-the-wild\"}, {\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-3273\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2024-04-11T00:00:00.000Z\", \"value\": \"CVE-2024-3273 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}, {\"providerMetadata\": {\"dateUpdated\": \"2024-08-01T20:05:08.255Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"name\": \"VDB-259284 | D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection\", \"tags\": [\"vdb-entry\", \"technical-description\", \"x_transferred\"], \"url\": \"https://vuldb.com/?id.259284\"}, {\"name\": \"VDB-259284 | CTI Indicators (IOB, IOC, TTP, IOA)\", \"tags\": [\"signature\", \"permissions-required\", \"x_transferred\"], \"url\": \"https://vuldb.com/?ctiid.259284\"}, {\"name\": \"Submit #304661 | D-LINK  DNS-340L, DNS-320L, DNS-327L, DNS-325 Version 1.11, Version 1.00.0409.2013, Version 1.09, Version 1.08, Version 1.03.0904.2013, Version 1.01 Command Injection, Backdoor Account\", \"tags\": [\"third-party-advisory\", \"x_transferred\"], \"url\": \"https://vuldb.com/?submit.304661\"}, {\"tags\": [\"exploit\", \"x_transferred\"], \"url\": \"https://github.com/netsecfish/dlink\"}, {\"tags\": [\"related\", \"x_transferred\"], \"url\": \"https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383\"}], \"title\": \"CVE Program Container\"}], \"cna\": {\"affected\": [{\"modules\": [\"HTTP GET Request Handler\"], \"product\": \"DNS-320L\", \"vendor\": \"D-Link\", \"versions\": [{\"status\": \"affected\", \"version\": \"20240403\"}]}, {\"modules\": [\"HTTP GET Request Handler\"], \"product\": \"DNS-325\", \"vendor\": \"D-Link\", \"versions\": [{\"status\": \"affected\", \"version\": \"20240403\"}]}, {\"modules\": [\"HTTP GET Request Handler\"], \"product\": \"DNS-327L\", \"vendor\": \"D-Link\", \"versions\": [{\"status\": \"affected\", \"version\": \"20240403\"}]}, {\"modules\": [\"HTTP GET Request Handler\"], \"product\": \"DNS-340L\", \"vendor\": \"D-Link\", \"versions\": [{\"status\": \"affected\", \"version\": \"20240403\"}]}], \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"netsecfish\"}, {\"lang\": \"en\", \"type\": \"reporter\", \"value\": \"netsecfish (VulDB User)\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. Affected is an unknown function of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument system leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259284. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.\"}, {\"lang\": \"de\", \"value\": \"Es wurde eine Schwachstelle in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L bis 20240403 gefunden. Sie wurde als kritisch eingestuft. Betroffen hiervon ist ein unbekannter Ablauf der Datei /cgi-bin/nas_sharing.cgi der Komponente HTTP GET Request Handler. Durch die Manipulation des Arguments system mit unbekannten Daten kann eine command injection-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff \\u00fcber das Netzwerk. Der Exploit steht zur \\u00f6ffentlichen Verf\\u00fcgung.\"}], \"metrics\": [{\"cvssV3_1\": {\"baseScore\": 7.3, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L\", \"version\": \"3.1\"}}, {\"cvssV3_0\": {\"baseScore\": 7.3, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L\", \"version\": \"3.0\"}}, {\"cvssV2_0\": {\"baseScore\": 7.5, \"vectorString\": \"AV:N/AC:L/Au:N/C:P/I:P/A:P\", \"version\": \"2.0\"}}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-77\", \"description\": \"CWE-77 Command Injection\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2024-04-11T09:43:52.051Z\", \"orgId\": \"1af790b2-7ee1-4545-860a-a788eba489b5\", \"shortName\": \"VulDB\"}, \"references\": [{\"name\": \"VDB-259284 | D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection\", \"tags\": [\"vdb-entry\", \"technical-description\"], \"url\": \"https://vuldb.com/?id.259284\"}, {\"name\": \"VDB-259284 | CTI Indicators (IOB, IOC, TTP, IOA)\", \"tags\": [\"signature\", \"permissions-required\"], \"url\": \"https://vuldb.com/?ctiid.259284\"}, {\"name\": \"Submit #304661 | D-LINK  DNS-340L, DNS-320L, DNS-327L, DNS-325 Version 1.11, Version 1.00.0409.2013, Version 1.09, Version 1.08, Version 1.03.0904.2013, Version 1.01 Command Injection, Backdoor Account\", \"tags\": [\"third-party-advisory\"], \"url\": \"https://vuldb.com/?submit.304661\"}, {\"tags\": [\"exploit\"], \"url\": \"https://github.com/netsecfish/dlink\"}, {\"tags\": [\"related\"], \"url\": \"https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383\"}], \"tags\": [\"unsupported-when-assigned\"], \"timeline\": [{\"lang\": \"en\", \"time\": \"2024-04-03T00:00:00.000Z\", \"value\": \"Advisory disclosed\"}, {\"lang\": \"en\", \"time\": \"2024-04-03T02:00:00.000Z\", \"value\": \"VulDB entry created\"}, {\"lang\": \"en\", \"time\": \"2024-04-11T11:48:46.000Z\", \"value\": \"VulDB entry last update\"}], \"title\": \"D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection\"}}, \"cveMetadata\": {\"assignerOrgId\": \"1af790b2-7ee1-4545-860a-a788eba489b5\", \"assignerShortName\": \"VulDB\", \"cveId\": \"CVE-2024-3273\", \"datePublished\": \"2024-04-04T01:00:06.842Z\", \"dateReserved\": \"2024-04-03T18:21:32.401Z\", \"dateUpdated\": \"2025-10-21T23:05:22.196Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.1\"}"},{"alert":0,"cve":"CVE-2024-3273","id":5281,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.99995, \"percentile\": 0.99988}"},{"alert":0,"cve":"CVE-2024-3273","id":3063,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.99995, \"percentile\": 0.99988}"},{"alert":1,"cve":"CVE-2024-3273","id":670,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2024-3273\", \"cwes\": [\"CWE-77\"], \"dateAdded\": \"2024-04-11\", \"dueDate\": \"2024-05-02\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Unknown\", \"notes\": \"https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383; https://nvd.nist.gov/vuln/detail/CVE-2024-3273\", \"product\": \"Multiple NAS Devices\", \"requiredAction\": \"This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.\", \"shortDescription\": \"D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L contain a command injection vulnerability. When combined with CVE-2024-3272, this can lead to remote, unauthorized code execution.\", \"vendorProject\": \"D-Link\", \"vulnerabilityName\": \"D-Link Multiple NAS Devices Command Injection Vulnerability\"}"}],"record":{"affected":[{"modules":["HTTP GET Request Handler"],"product":"DNS-320L","vendor":"D-Link","versions":[{"status":"affected","version":"20240403"}]},{"modules":["HTTP GET Request Handler"],"product":"DNS-325","vendor":"D-Link","versions":[{"status":"affected","version":"20240403"}]},{"modules":["HTTP GET Request Handler"],"product":"DNS-327L","vendor":"D-Link","versions":[{"status":"affected","version":"20240403"}]},{"modules":["HTTP GET Request Handler"],"product":"DNS-340L","vendor":"D-Link","versions":[{"status":"affected","version":"20240403"}]}],"cna":{"containers":{"adp":[{"affected":[{"cpes":["cpe:2.3:a:dlink:dns-320l_firmware:20240403:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"dns-320l_firmware","vendor":"dlink","versions":[{"status":"affected","version":"20240403"}]},{"cpes":["cpe:2.3:a:dlink:dns-325_firmware:20240403:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"dns-325_firmware","vendor":"dlink","versions":[{"status":"affected","version":"20240403"}]},{"cpes":["cpe:2.3:a:dlink:dns-327l_firmware:20240403:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"dns-327l_firmware","vendor":"dlink","versions":[{"status":"affected","version":"20240403"}]},{"cpes":["cpe:2.3:a:dlink:dns-340l_firmware:20240403:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"dns-340l_firmware","vendor":"dlink","versions":[{"status":"affected","version":"20240403"}]}],"metrics":[{"other":{"content":{"id":"CVE-2024-3273","options":[{"Exploitation":"active"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2024-04-12T04:00:37.894213Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2024-04-11","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-3273"},"type":"kev"}}],"providerMetadata":{"dateUpdated":"2025-10-21T23:05:22.196Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"url":"https://www.greynoise.io/blog/cve-2024-3273-d-link-nas-rce-exploited-in-the-wild"},{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-3273"}],"timeline":[{"lang":"en","time":"2024-04-11T00:00:00.000Z","value":"CVE-2024-3273 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"},{"providerMetadata":{"dateUpdated":"2024-08-01T20:05:08.255Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"VDB-259284 | D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection","tags":["vdb-entry","technical-description","x_transferred"],"url":"https://vuldb.com/?id.259284"},{"name":"VDB-259284 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required","x_transferred"],"url":"https://vuldb.com/?ctiid.259284"},{"name":"Submit #304661 | D-LINK  DNS-340L, DNS-320L, DNS-327L, DNS-325 Version 1.11, Version 1.00.0409.2013, Version 1.09, Version 1.08, Version 1.03.0904.2013, Version 1.01 Command Injection, Backdoor Account","tags":["third-party-advisory","x_transferred"],"url":"https://vuldb.com/?submit.304661"},{"tags":["exploit","x_transferred"],"url":"https://github.com/netsecfish/dlink"},{"tags":["related","x_transferred"],"url":"https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383"}],"title":"CVE Program Container"}],"cna":{"affected":[{"modules":["HTTP GET Request Handler"],"product":"DNS-320L","vendor":"D-Link","versions":[{"status":"affected","version":"20240403"}]},{"modules":["HTTP GET Request Handler"],"product":"DNS-325","vendor":"D-Link","versions":[{"status":"affected","version":"20240403"}]},{"modules":["HTTP GET Request Handler"],"product":"DNS-327L","vendor":"D-Link","versions":[{"status":"affected","version":"20240403"}]},{"modules":["HTTP GET Request Handler"],"product":"DNS-340L","vendor":"D-Link","versions":[{"status":"affected","version":"20240403"}]}],"credits":[{"lang":"en","type":"finder","value":"netsecfish"},{"lang":"en","type":"reporter","value":"netsecfish (VulDB User)"}],"descriptions":[{"lang":"en","value":"** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. Affected is an unknown function of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument system leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259284. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced."},{"lang":"de","value":"Es wurde eine Schwachstelle in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L bis 20240403 gefunden. Sie wurde als kritisch eingestuft. Betroffen hiervon ist ein unbekannter Ablauf der Datei /cgi-bin/nas_sharing.cgi der Komponente HTTP GET Request Handler. Durch die Manipulation des Arguments system mit unbekannten Daten kann eine command injection-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff \u00fcber das Netzwerk. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."}],"metrics":[{"cvssV3_1":{"baseScore":7.3,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","version":"3.1"}},{"cvssV3_0":{"baseScore":7.3,"baseSeverity":"HIGH","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","version":"3.0"}},{"cvssV2_0":{"baseScore":7.5,"vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","version":"2.0"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-77","description":"CWE-77 Command Injection","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2024-04-11T09:43:52.051Z","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB"},"references":[{"name":"VDB-259284 | D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection","tags":["vdb-entry","technical-description"],"url":"https://vuldb.com/?id.259284"},{"name":"VDB-259284 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"],"url":"https://vuldb.com/?ctiid.259284"},{"name":"Submit #304661 | D-LINK  DNS-340L, DNS-320L, DNS-327L, DNS-325 Version 1.11, Version 1.00.0409.2013, Version 1.09, Version 1.08, Version 1.03.0904.2013, Version 1.01 Command Injection, Backdoor Account","tags":["third-party-advisory"],"url":"https://vuldb.com/?submit.304661"},{"tags":["exploit"],"url":"https://github.com/netsecfish/dlink"},{"tags":["related"],"url":"https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383"}],"tags":["unsupported-when-assigned"],"timeline":[{"lang":"en","time":"2024-04-03T00:00:00.000Z","value":"Advisory disclosed"},{"lang":"en","time":"2024-04-03T02:00:00.000Z","value":"VulDB entry created"},{"lang":"en","time":"2024-04-11T11:48:46.000Z","value":"VulDB entry last update"}],"title":"D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection"}},"cveMetadata":{"assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","assignerShortName":"VulDB","cveId":"CVE-2024-3273","datePublished":"2024-04-04T01:00:06.842Z","dateReserved":"2024-04-03T18:21:32.401Z","dateUpdated":"2025-10-21T23:05:22.196Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"cna_checked":1794219601,"cve":"CVE-2024-3273","description":"** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. Affected is an unknown function of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument system leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259284. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.","epss":{"date":"2026-11-12","epss":0.99995,"percentile":0.99988},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2024-3273","cwes":["CWE-77"],"dateAdded":"2024-04-11","dueDate":"2024-05-02","forensicTriage":"No","knownRansomwareCampaignUse":"Unknown","notes":"https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383; https://nvd.nist.gov/vuln/detail/CVE-2024-3273","product":"Multiple NAS Devices","requiredAction":"This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.","shortDescription":"D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L contain a command injection vulnerability. When combined with CVE-2024-3272, this can lead to remote, unauthorized code execution.","vendorProject":"D-Link","vulnerabilityName":"D-Link Multiple NAS Devices Command Injection Vulnerability"},"kev_checked":1794522003,"products":"D-Link DNS-320L, D-Link DNS-325, D-Link DNS-327L, D-Link DNS-340L","references":["https://vuldb.com/?id.259284","https://vuldb.com/?ctiid.259284","https://vuldb.com/?submit.304661","https://github.com/netsecfish/dlink","https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383","https://www.greynoise.io/blog/cve-2024-3273-d-link-nas-rce-exploited-in-the-wild","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-3273"],"score":{"baseScore":7.3,"baseSeverity":"HIGH","provider":"VulDB","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection","updated_at":1794500401,"workarounds":""},"sources":[]}