CVE-2024-3273

2025-12-10

64.225.115.99

united states 

D-Link 

DNS-320L 

GET /cgi-bin/nas_sharing.cgi?user=messagebus&passwd=&cmd=15&system=aWQ%3D HTTP/1.0
Host: blog.██████
X-Forwarded-For: █████████████
Connection: close

CVE-2024-3273 is a critical command injection vulnerability affecting D-Link NAS devices, specifically models DNS-320L, DNS-325, DNS-327L, and DNS-340L, up to the firmware version dated April 3, 2024. The vulnerability resides in the HTTP GET Request Handler component, specifically in the /cgi-bin/nas_sharing.cgi file. By manipulating the 'system' argument, an attacker can inject and execute arbitrary commands on the device. This attack can be launched remotely and does not require prior authentication, making it highly exploitable. The vulnerability has been actively exploited in the wild, with over 90,000 devices potentially affected. The exploit has been publicly disclosed, and proof-of-concept code is available online. The critical nature of this vulnerability is underscored by its CVSS score of 9.8. It is important to note that these devices are no longer supported by D-Link, having reached their end-of-life (EOL) or end-of-service (EOS) status. As such, no official patches or updates will be provided to mitigate this issue.

Retire and Replace: Since the affected devices are end-of-life and no longer supported, the primary recommendation is to retire and replace these devices with newer, supported models.
Network Segmentation: Isolate the affected NAS devices from the rest of the network to minimize potential exploitation.
Firewall Rules: Implement strict firewall rules to block access to the vulnerable endpoints from untrusted networks.
Monitor and Respond: Continuously monitor network traffic for signs of exploitation and respond promptly to any suspicious activity.
Disable Unnecessary Services: Disable any unnecessary services on the NAS devices to reduce the attack surface.
Vendor Consultation: Consult with D-Link or a cybersecurity professional for further guidance and potential alternative solutions.