What is CVE-2024-3273?

CVE-2024-3273 is a high-severity vulnerability in D-Link Dns-320l, classified under Command Injection. CVSS score: 7.3/10. Published 2024-04-04.

How severe is CVE-2024-3273?

High severity. CVSS v3 base score is 7.3 out of 10.

Is CVE-2024-3273 known to be exploited?

Yes. CVE-2024-3273 is listed in the CISA Known Exploited Vulnerabilities catalog (added 2024-04-11), indicating it is being actively exploited. 52 public proof-of-concept repositories are indexed.

RCE in D-Link Dns-320l

CVE-2024-3273

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. Affected is an unknown function of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument system leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259284. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 1.000 (100.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.

Affected products

Weakness classification (CWE)

CWE-77 — Command Injection

CISA KEV (Known Exploited Vulnerabilities)

This CVE is on the CISA KEV catalog, added on 2024-04-11. CISA KEV inclusion means CISA has confirmed in-the-wild exploitation; US federal agencies are required to remediate within a published due date.

BOD 22-01 due date: 2024-05-02.

Required action: This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.

Public proof-of-concept exploits

References

cna@vuldb.com (technical-description, VDB Entry, Third Party Advisory, vdb-entry)
cna@vuldb.com (signature, Permissions Required, permissions-required, VDB Entry)
cna@vuldb.com (VDB Entry, Third Party Advisory, third-party-advisory)
cna@vuldb.com (Exploit, Third Party Advisory, exploit)
cna@vuldb.com (related, Vendor Advisory)
134c704f-9b21-4f2e-91b3-4a467353bcc0 (US Government Resource)
134c704f-9b21-4f2e-91b3-4a467353bcc0 (Third Party Advisory)

Frequently asked questions

What is CVE-2024-3273?: CVE-2024-3273 is a high-severity vulnerability in D-Link Dns-320l, classified under Command Injection. CVSS score: 7.3/10. Published 2024-04-04.
How severe is CVE-2024-3273?: High severity. CVSS v3 base score is 7.3 out of 10.
Is CVE-2024-3273 known to be exploited?: Yes. CVE-2024-3273 is listed in the CISA Known Exploited Vulnerabilities catalog (added 2024-04-11), indicating it is being actively exploited. 52 public proof-of-concept repositories are indexed.