Firetruck

CVE-2024-3273

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L contain a command injection vulnerability. When combined with CVE-2024-3272, this can lead to remote, unauthorized code execution.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
DNS-320LD-Link / DNS-320L20240403affected
dns-320l_firmwaredlink / dns-320l_firmware20240403affected
DNS-325D-Link / DNS-32520240403affected
dns-325_firmwaredlink / dns-325_firmware20240403affected
DNS-327LD-Link / DNS-327L20240403affected
dns-327l_firmwaredlink / dns-327l_firmware20240403affected
DNS-340LD-Link / DNS-340L20240403affected
dns-340l_firmwaredlink / dns-340l_firmware20240403affected