Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as very critical, has been found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. This issue affects some unknown processing of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument user with the input messagebus leads to hard-coded credentials. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259283. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2024-05-02. This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.
Priority
LOW
Exploitation
ACTIVE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
8 versions affected across 40 products
🧺仏大手スーパーへのサイバー攻撃、冷蔵設備に存在する脆弱性は数か月前から警告されていたことが明らかに ⚠️ハッカーがD-LinkやUbiquitiの機器を乗っ取り、盗んだ帯域幅を再販（CVE-2024-3272、CVE-2024-3273他） 〜サイバーアラート10月16日〜 https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/48110/
🚨 机器人 安全警报｜NAS 和录像机被劫持当“住宅代理” GreyNoise：34 个国家至少 143 台设备的网络带宽被攻击者偷偷转卖。根因是暴露在公网的 D-Link ShareCenter NAS、Ubiquiti UniFi Video 录像机等设备一直没修补已知漏洞（CVE-2024-3272/3273、Log4Shell CVE-2021-44228），SAP NetWeaver（CVE-2025-31324）也在被利用之列。 🗓 时间：10/15 18:20 UTC 🏷 分类：IoT / 代理劫持 / 已知漏洞利用 ⚠️ 攻击方式：攻击者扫描公网上的 NAS 和 NVR/DVR 录像机，用旧漏洞拿到执行权限后，静默安装正规的带宽共享软件 http://Pawns.app，并在运行时填入自己的账号，带宽收益全部归攻击者。部分设备还被加了攻击者的 SSH 密钥作为备用后门。机主几乎看不出异常，但自家或公司的 IP 会被别人用来转发流量，可能被网站封禁，或被卷入撞库等恶意活动。 🔗 详情：https://www.bleepingcomputer.com/news/security/hackers-hijack-d-link-ubiquiti-devices-to-resell-your-stolen-bandwidth/ 🛡 提示：不要把 NAS、录像机的管理界面直接暴露在公网，固件要更新到最新；已停产、没有补丁的设备尽快下线或隔离。检查设备上有没有陌生的 pawns 进程，以及 authorized_keys 里有没有不认识的 SSH 公钥。
43 of 43 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | dlink | dnr-202l | - | - | - |
| OS | dlink | dnr-202l_firmware | - | - | - |
| HW | dlink | dnr-322l | - | - | - |
| OS | dlink | dnr-322l_firmware | - | - | - |
| HW | dlink | dnr-326 | - | - | - |
| OS | dlink | dnr-326_firmware | - | - | - |
| HW | dlink | dns-1100-4 | - | - | - |
| OS | dlink | dns-1100-4_firmware | - | - | - |
| HW | dlink | dns-120 | - | - | - |
| HW | dlink | dns-1200-05 | - | - | - |
| OS | dlink | dns-1200-05_firmware | - | - | - |
| OS | dlink | dns-120_firmware | - | - | - |
| HW | dlink | dns-1550-04 | - | - | - |
| OS | dlink | dns-1550-04_firmware | - | - | - |
| HW | dlink | dns-315l | - | - | - |
| OS | dlink | dns-315l_firmware | - | - | - |
| HW | dlink | dns-320 | - | - | - |
| OS | dlink | dns-320_firmware | - | - | - |
| HW | dlink | dns-320l | - | - | - |
| OS | dlink | dns-320l_firmware | 1.01.0702.2013 | - | - |
| OS | dlink | dns-320l_firmware | 1.03.0904.2013 | - | - |
| OS | dlink | dns-320l_firmware | 1.11 | - | - |
| HW | dlink | dns-320lw | - | - | - |
| OS | dlink | dns-320lw_firmware | - | - | - |
| HW | dlink | dns-321 | - | - | - |
| OS | dlink | dns-321_firmware | - | - | - |
| HW | dlink | dns-323 | - | - | - |
| OS | dlink | dns-323_firmware | - | - | - |
| HW | dlink | dns-325 | - | - | - |
| OS | dlink | dns-325_firmware | 1.01 | - | - |
| HW | dlink | dns-326 | - | - | - |
| OS | dlink | dns-326_firmware | - | - | - |
| HW | dlink | dns-327l | - | - | - |
| OS | dlink | dns-327l_firmware | 1.00.0409.2013 | - | - |
| OS | dlink | dns-327l_firmware | 1.09 | - | - |
| HW | dlink | dns-340l | - | - | - |
| OS | dlink | dns-340l_firmware | 1.08 | - | - |
| HW | dlink | dns-343 | - | - | - |
| OS | dlink | dns-343_firmware | - | - | - |
| HW | dlink | dns-345 | - | - | - |
| OS | dlink | dns-345_firmware | - | - | - |
| HW | dlink | dns-726-4 | - | - | - |
| OS | dlink | dns-726-4_firmware | - | - | - |