Evidence dossier

CVE-2024-3272

D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials

84.3–99.8Priority evidence range

As known Jul 19, 2026, 5:00 AM UTCgen-56ccdaf9

Normalized restatement

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as very critical, has been found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. This issue affects some unknown processing of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument user with the input messagebus leads to hard-coded credentials. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259283. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.

State: PUBLISHED
Published: Apr 4, 2024
Updated: Oct 21, 2025
Evidence coverage: 72%

CISA KEVCatalog member

This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.

FIRST EPSS98.04%

2026-07-18 · v2026.06.15 · percentile 99.9%

Source stateConflict visible

Distinct CVSS assessments remain side by side; none are averaged.

Source comparison

Who said what

CISA-ADPindependent enrichment

container

CISA ADP Vulnrichment

Jul 19, 2026Original evidence ↗

CVEderivative copy

container

CVE Program Container

Jul 19, 2026Original evidence ↗

VulDBoriginal assertion

container

D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials

Jul 19, 2026Original evidence ↗

CISA KEVoriginal assertion

observed_exploitation

D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability

Jul 19, 2026Original evidence ↗

FIRST EPSSoriginal assertion

model_probability

Probability 0.980380000000; percentile 0.999050000000

Jul 19, 2026Original evidence ↗

Applicability

Cited product scope

Trace impact →

dlinkdns-320l_firmware

[{"status": "affected", "version": "20240403"}]unknown

dlinkdns-325_firmware

[{"status": "affected", "version": "20240403"}]unknown

dlinkdns-327l_firmware

[{"status": "affected", "version": "20240403"}]unknown

dlinkdns-340l_firmware

[{"status": "affected", "version": "20240403"}]unknown

D-LinkDNS-320L

[{"status": "affected", "version": "20240403"}]unknown

D-LinkDNS-325

[{"status": "affected", "version": "20240403"}]unknown

D-LinkDNS-327L

[{"status": "affected", "version": "20240403"}]unknown

D-LinkDNS-340L

[{"status": "affected", "version": "20240403"}]unknown