92,000+ internet-facing D-Link NAS devices accessible via "backdoor" account (CVE-2024-3273)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2024-3273+1 related CVE | Command Injection in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L NAS Devices | 9.8 | 100% | KEVPoC | KEV |
From the original article
2 min read at helpnetsecurity.com
A vulnerability (CVE-2024-3273) in four old D-Link NAS models could be exploited to compromise internet-facing devices, a threat researcher has found. The existence of the flaw was confirmed by D-Link last week, and an exploit for opening an interactive shell has popped up on GitHub. “The vulnerability lies within the nas_sharing.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.