Critical takeover vulnerabilities in 92,000 D
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2024-3273+1 related CVE | Command Injection in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L NAS Devices | 9.8 | 100% | KEVPoC | KEV |
From the original article
1 min read at arstechnica.com
Hackers are actively exploiting a pair of recently discovered vulnerabilities to remotely commandeer network-attached storage devices manufactured by D-Link, researchers said Monday. Roughly 92,000 devices are vulnerable to the remote takeover exploits, which can be remotely transmitted by sending malicious commands through simple HTTP traffic. The vulnerability came to light two weeks ago.
arstechnica.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.